Cybersecurity IAM Analyst

This is a hands-on security position within the Information Security group, working closely with the internal IT department  role's core focus is managing and coordinating the day-to-day functions of identity and access management operations, helping to protect enterprise assets by ensuring the right individuals have appropriate access to systems, applications, and data in line with business needs and risk tolerance. The IAM Analyst supports both operational execution — provisioning, access changes, and incident response — and governance functions such as access reviews, policy enforcement, and identity lifecycle management, contributing to a scalable and auditable IAM programme.

The environment is fast-paced and commonly on the leading edge of technology, including early adoption of various cloud services and the challenges of integrating those services into the security practice.

• Maintain a deep understanding of user lifecycle management, including provisioning and de-provisioning, access requests, user entitlements, and audit and validations.
• Provide design, evaluation, analysis, testing, debugging, and implementation of identity and access management programmes to support the company's strategy.
• Maintain standards for access management across the company and department, including role-based access control (RBAC) models and entitlement catalogues.
• Collaborate with HRIS, IT service owners, and the service desk to troubleshoot and fulfil identity-related workflows.
• Apply knowledge of identity governance workflows, including the concepts of attestation and auditing.
• Assist in automating identity workflows and processes for lifecycle management, auditing, reporting, governance, and self-service.
• Execute periodic access reviews and certifications and track remediation activities.
• Contribute to audit readiness and evidence collection for IAM controls.
• Improve operational efficiency through standardisation and runbook development.
• Participate in cross-functional initiatives, including M&A integrations and system migrations.

• A minimum of 2-3 years in Information Technology.
• A minimum of 2 years' experience in Identity Management.
• Experience in lifecycle management and provisioning and de-provisioning.
• Knowledge of different MFA and compensating controls for identity.
• Knowledge of privileged identity management, privileged access management, and the concepts of just-in-time provisioning, just-enough access, and principle of least privilege.
• Familiarity with scripting in at least one of the following languages:
  Power Shell, Python, or JavaScript.
• A strong understanding of the fundamental operations of servers, operating systems, cloud applications, and infrastructure.
• A deep understanding of user lifecycle management, including provisioning and de-provisioning, access requests, user entitlements, and audit and validations.

• A minimum of 2 years' experience in information security.
• A Bachelor's or Master's degree in a relevant field of work.
• Account set-up and access management.
• Experience working closely with human resources and help desk support staff.
• A demonstrated organised and methodical approach to making improvements on past organisations' technology projects.
• Experience in automation and integration with SaaS applications.
• Understanding of OAuth, SAML, and OpenID frameworks.
• Building and using REST APIs.
• Knowledge and experience of SCIM provisioning and integration.
• Experience creating and supporting a fully identity framework or IDaaS.
• An understanding of the NIST framework and using a continuous improvement loop.
• A familiarity with vulnerability assessment and network scanning tools.

• Hybrid working, based in the Nashville office.

• Eligible for benefits and a discretionary bonus.
• The company pays 80%-100% of the cost of medical, basic life and AD&D insurance, telemedicine, employee assistance and mental health counselling (in person, virtually, or through text), paid vacation and holidays, paid sick time, paid parental leave and other paid leaves of absence, NICU leave, bereavement resources, adoption benefits, educational assistance, mental health resources.
• And an employee assistance plan.
• Voluntary benefits employees may elect include dental and vision insurance, a 401K plan, flexible spending accounts (health care and dependent care), a health savings account, and voluntary life and AD&D insurance.
• Commuter benefits.
• Other statutory…