Staff Engineer - IT

R1’s IT Security Team is seeking an accomplished IT Risk and Management (ITRM) Lead Staff Engineer. This position will primarily concentrate on automating User Access Reviews and ensuring Audit Compliance, along with other ITRM responsibilities as assigned. The selected candidate will oversee user access review automation, maintain regulatory compliance, and actively support audit functions. This role requires deep expertise in access control, compliance mandates, and hands‑on experience with implementing and managing automated solutions.

• Design, implement, and manage automated user access review solutions.
• Develop, enhance, and maintain scripts, tools, and processes to optimize access review workflows.
• Collaborate closely with IT and security teams to integrate access review systems into the existing technology landscape.
• Continuously monitor and verify the accuracy and effectiveness of automated access review processes.
• Perform quality assurance (QA) reviews to ensure process integrity.
• Maintain compliance with all relevant regulatory frameworks, such as SOX, SOC 2, PCI, HIPAA, and other applicable standards.
• Prepare and manage documentation to support both internal and external audits and compliance reviews.
• Conduct periodic internal audits to confirm adherence to established access control policies and procedures.
• Provide required documentation and address issues during external audits.
• Conduct or support Vendor Audits to ensure that R1’s vendors comply with contractual and regulatory obligations.

• Bachelor’s degree in information technology, Cybersecurity, Business Administration, or related field.
• Demonstrated experience in user access review automation, audit compliance, or similar disciplines.
• Strong command of access control methodologies, regulatory frameworks, and compliance standards.
• Proficiency in scripting and automation technologies (e.g., Python, Power Shell, Java).
• Practical experience with identity and access management (IAM) systems and associated tools.
• Superior analytical, problem‑solving, and organizational abilities.
• Excellent communication and interpersonal skills with a proven ability to collaborate effectively with cross‑functional teams.
• Relevant certifications such as CISA, CISM, CISSP, or equivalent credentials are highly desirable.