Senior Manager, IAM Process & Control Assessment; IAM Process & Compliance

Position: Senior Manager, IAM Process & Control Assessment (IAM Process & Compliance)

Job Description

What is the Opportunity?In this Senior Manager, IAM Process & Control Assessment role, you will drive identity and access management control compliance assurance through framework for control impact assessments including triage, analysis, and governance while simultaneously contributing to the design and standardization of end-to-end IAM processes across multiple platforms. This enables leadership to ensure IAM controls are properly managed, deviations are rigorously governed, processes are standardized and efficient, and the organization maintains a robust compliance posture while enabling secure innovation.
What Will You Do?

Control Impact Assessment & Governance: Receive, triage, and analyze all Control Impact Assessment requests; perform structured gap analysis identifying impacted IAM controls (LASS, SOX, NIST); evaluate compensating controls for adequacy and residual risk; maintain centralized exception registry; coordinate annual attestations; communicate decisions to stakeholders; track exception trends to identify systemic compliance gaps.

Maintain centralized registry of all CIA requests, approvals, and exceptions for audit trails and compliance reporting. Coordinate annual attestation cycles requiring application custodians to confirm approved deviations remain within scope and mitigation strategies are active. Track and report on exception trends to identify systemic control gaps and process design issues requiring remediation.

Communicate assessment progress and decisions to application owners, IAM teams, and IAM Governance. Prepare impact summaries and remediation checklists for executive decision-makers. Partner with stakeholders to ensure understanding of control requirements and compliance obligations.

Develop enhanced CIA templates and process documentation toolkits that standardize best practices and reduce documentation time. Innovate control assessment and process design methodologies (e.g., semi-automated gap analysis, risk-scoring algorithms, AI-assisted control assessments). Manage project timelines and stakeholder adoption with full accountability for project outcomes.

IAM Process Design & Documentation Leadership: Partner with IAM operations and platform teams to design end-to-end IAM processes (provisioning, deprovisioning, access review, authentication, PAM, attestation); create comprehensive process documentation with narrative workflows, RACI matrices, and explicit control mappings; establish process documentation standards; contribute to the authoritative IAM Process Library.

Project Leadership & Process Innovation: Lead cross-functional process improvement projects autonomously with minimal oversight from Director, Process Services. Identify and execute process enhancement initiatives (e.g., process flow redesign, access provisioning standardization, deprovisioning acceleration). Design CIA workflow automation using Service Now, Power Automate, or RBC-approved tools to reduce manual effort, improve SLA compliance, and automate control checkpoints.

Audit & Regulatory Support: Provide support for all IAM controls related audit, regulatory, and third-party requests for evidence.

What Do You Need To Succeed?
Must Have:

5+ years of experience in a comparable role, with a proven track record of identifying actionable insights and presenting findings to senior leadership to support informed decision making

3+ years in dedicated control assessment, compliance gap analysis, control deviation management, or IAM governance roles

3+ years designing, documenting, or improving IAM processes across platforms

Deep knowledge of LASS (RBC Logic Access Standard), SOX IAM controls (230.x series), and NIST SP 800-53 Rev. 5

Track record of creating process documentation, workflows, and Visio diagrams for compliance or operations teams

Ability to create standardized Visio swimlane diagrams for key IAM processes showing actor roles, decision points, system interactions, and control checkpoints; design reusable visual templates for process documentation; use diagrams for stakeholder communication and training

Demonstrated project leadership managing cross-functional process…