Identity Access Management Support

Primary control assurance function within the IAM operating model. Validates design and operating effectiveness of IAM control standards/libraries in line with regulatory, risk and cybersecurity requirements. Drives control monitoring programs, effectiveness testing methodologies, and tracks control exceptions/remediation. Assesses JML, PAM and access certification controls, validates SoD and least-privilege. Monitors/reports control deficiencies and risk indicators. Supports audit reviews and regulatory examinations, maintains control evidence repositories, and validates management actions.

Required Skills

• 3+ years in IAM Controls, IT Risk, IT Audit, Cybersecurity Compliance or Technology Risk.
• Strong understanding of IAM controls testing and audit requirements.
• Familiarity supporting regulatory, internal or external audit programs.
• Strong analytical and documentation skills.
• Preferred: CRISC, CISM, ISO 27001 Lead Auditor or equivalent; financial services industry experience.