Location: Chicago, Illinois
W2/1099 only
Description: The IAM Audit Analyst leads audit engagements (internal/external) focused on Identity and Access Management (IAM), IT controls, and cybersecurity. This role involves overseeing audit request execution, evaluating evidence, and working closely with 1LOD/2LOD to define scope and develop effective evidence testing documentation.
You will bring technical expertise in risk, controls, and IAM technologies, ensuring strong governance and compliance across access management processes.
Key Responsibilities
Lead projects related to:
1-Identity and Access Management (IAM) controls
Client General Controls (ITGC)
2-Information security / cybersecurity
3-Application and system implementation reviews
Client governance and operational processes
Provide oversight and guidance to stakeholders on IAM Audit requests and Evidence Requests
Partner with Implementation owners to:
4-Define audit scope and objectives
5-Develop appropriate testing strategies based on risk assessment
Assist in developing evidence testing timelines based on scope and risk
Finalize and review audit planning and scoping documentation
Conduct and review walkthroughs and testing of:
6-Application controls
7-Interface controls
8-IAM processes (provisioning, de-provisioning, access reviews, PAM)
Ensure work meets departmental standards and quality requirements
Analyze and review implementation plans, and follow up on milestones for issues identified by 1LOD, 2LOD, and Audit teams
Work with various stakeholders across business, technology, risk, and control functions to drive issue resolution, remediation tracking, and governance alignment
Communicate audit status and findings to business stakeholders and leadership
Draft audit findings, reports, and recommendations for:
9-Status updates
10-Memos
11-Final Closure Packages
Identify and evaluate risks, control gaps, and remediation actions
Coordinate with other teams (regional, business unit, specialist teams) to ensure comprehensive coverage of risk areas
________________________________________
Required Skills & Qualifications
5 10 years of experience in:
Client Audit / Risk / Controls
oIAM-focused audits or security controls
Strong knowledge of:
oAudit standards, methodologies, and procedures
Client systems, applications, and cybersecurity risks
oIdentity and Access Management (IAM) principles, including:
User lifecycle management
Role-based access control (RBAC)
Privileged Access Management (PAM)
Experience with IAM technologies such as:
oSailPoint, Saviynt, Okta, Azure AD, CyberArk (or similar)
Understanding of IT General Controls (ITGC) and compliance frameworks (SOX, ISO, etc.)
Ability to lead and execute:
oWalkthroughs
oDesign and operational effectiveness testing
Strong analytical, documentation, and reporting skills
Excellent communication and stakeholder management skills
________________________________________
Preferred Qualifications
Certifications such as:
oCISA, CISSP, CRISC (ISACA, ISC2, or equivalent)
Experience in:
oIAM governance and access certification programs
oCloud IAM environments (Azure, AWS, Google Cloud Platform)
Ability to manage:
oMultiple projects simultaneously
oTight deadlines with strong prioritization
________________________________________
Key Competencies
Strong risk and control mindset
Ability to lead audit engagements independently
Attention to detail with a strategic perspective
Flexibility, creative thinking, and sound business judgment
Team-player with ability to thrive in high-pressure environments
Note:
This is not a traditional IAM Analyst role. They need someone who sits at the intersection of:
- Identity & Access Management (IAM)
- Audit
- Risk & Controls
The individual must be able to work independently with very little direction and immediately contribute.
Non-Negotiable Skills
- Direct Identity & Access Management (IAM) experience
- Strong understanding of IAM controls including:
- User provisioning
- Deprovisioning
- Access certifications/reviews
- Privileged Access Management (PAM)
- Standard user access
- Separation of Duties (SoD)
- Experience supporting internal and external audits
- Experience partnering with Risk, First Line of Defense (1LOD), and Second Line of Defense (2LOD)
- Comfortable gathering and presenting audit evidence
- Experience performing audit walkthroughs and demonstrations for auditors
Preferred Background
- SOX controls
- SOC audits
- NIST framework exposure
- Risk management mindset
- Financial services experience is a plus
Personality They're Looking For
- Excellent organization and attention to detail
- Comfortable presenting to auditors and senior stakeholders
- Looking for 5 10 years of experience, but quality of experience is more important than years.
||
Never miss an opportunity! Create an alert based on the job you applied for.
