IAM Governance & Controls Security Analyst

IAM Governance & Controls Security Analyst Job Location s

US-Remote

At Health Equity, trust is everything. In this role, you'll help ensure access to our systems is thoughtfully governed, continuously improved, and securely managed as we scale. Your work will directly reduce risk, strengthen compliance, and enable teams across the company to move faster‑safely. By improving identity and access governance, you'll help protect sensitive health and financial data that millions of members rely on every day.

This is a hands‑on role with real impact, where strong security practices enable our mission to connect health and wealth.

Health Equity is on a mission to simplify healthcare spending and saving. We build technology that helps people make smarter decisions about their health and financial future. Behind every great product experience is a secure, well‑governed foundation—and our IAM team plays a vital role in making that possible. As an IAM Governance & Controls Security Analyst
, you'll be a key contributor within our Identity & Access Management program. You'll work across security, technology, compliance, and business teams to strengthen IAM controls, support SOX compliance, and modernize how access is managed across a complex enterprise environment.

This role is ideal for someone who enjoys combining technical understanding, process improvement, and cross‑functional collaboration to deliver smarter, more automated security outcomes—while building strong partnerships with application owners and stakeholders across the business.

• Identify and assess internal and external IAM risks, driving meaningful and durable improvements.
• Manage User Access Certifications (UACs) for inscope systems to support SOX compliance.
• Partner closely with Compliance and Audit teams to ensure access governance meets regulatory expectations.
• Support application onboarding and access centralization, working directly with application owners and SMEs to align user access into standardized IAM processes.
• Guide application owners through the transition of user access management into IAM, clearly communicating roles, responsibilities, and benefits of centralized access management.
• Define, document, and govern access roles and entitlements across Health Equity platforms.
• Help application owners design role structures and access models that reduce complexity and improve long‑term maintainability.
• Develop and maintain metrics and reporting related to UACs, integrations, provisioning health, and access hygiene.
• Analyze provisioning and deprovisioning issues, identify root causes, and recommend scalable, long‑term solutions.
• Use Generative AI to identify anomalies, surface control gaps, reduce manual effort, and standardize access patterns.
• Support User Acceptance Testing (UAT) for IAM enhancements and defect fixes.
• Create, maintain, and continuously improve clear, actionable IAM documentation, standards, and process guidance.
• Participate in IAM initiatives and cross‑functional projects that improve identity governance maturity across the organization.

• Bachelor's degree in Information Systems, Computer Science, Engineering, or a related field—or equivalent practical experience.
• 2+ years of experience in IAM administration, access governance, or closely related security or identity work.
• A solid understanding of IAM principles, including access lifecycle management, provisioning, deprovisioning, and role‑based access concepts.
• Hands‑on exposure to IAM platforms such as SailPoint, Beyond Trust, Okta, Oracle Identity Manager, or similar tools.
• Experience working directly with end users and application owners to gather access requirements and translate them into IAM‑managed solutions.
• Strong documentation skills, with the ability to follow, improve, and evolve written processes and standards.
• Ability to work independently, follow documented procedures, and proactively improve processes as gaps or inefficiencies are identified.
• Clear, professional communication skills, including the ability to explain IAM concepts to non‑technical application owners and stakeholders.
• Comfort operating in regulated environments and…