IAM Governance Analyst

The Identity Access Management Governance Analyst supports enterprise IAM governance across Active Directory, Microsoft Entra , and integrated applications. This role helps maintain clear standards for access structures, group ownership, naming, lifecycle management, and periodic reviews so that access remains understandable, auditable, and maintainable over time. The analyst partners with Security, Infrastructure, Application, Compliance, Audit, and support teams to reduce access risk, document control evidence, and improve IAM practices without serving as the primary day-to-day provisioning function.

• Support standards for IAM group creation, ownership, naming, and lifecycle management across enterprise identity platforms.
• Maintain inventories of IAM groups, access models, owners, and dependencies; identify legacy, orphaned, redundant, or high-risk access for review.
• Assist with access rationalization efforts that improve least-privilege alignment, segregation of duties, audit readiness, and operational clarity.
• Coordinate periodic access reviews and certifications, including preparation of evidence, follow-up with business owners, and documentation of outcomes.
• Partner with application, infrastructure, security, compliance, and audit teams to evaluate access design and support sustainable governance decisions.
• Document group standards, ownership models, review procedures, runbooks, decision records, and support handoff materials.
• Analyze IAM data to identify trends, gaps, exceptions, and control risks; communicate findings in clear, actionable language for technical and non-technical stakeholders.
• Support implementation and maintenance of role-based access control practices, privileged access processes, and identity lifecycle controls.
• Assist with Microsoft Entra  / Azure AD, Active Directory, and integrated application governance activities, including access model reviews and policy alignment.
• Participate in change management activities related to IAM governance, ensuring changes are documented, traceable, and aligned with internal control requirements.
• Provide support during internal and external audits by gathering evidence, explaining IAM governance processes, and helping remediate identified gaps.
• Collaborate on process improvements that reduce future access sprawl and improve consistency, accountability, and maintainability of IAM structures.
• Troubleshoot and research access governance issues, escalating complex design or control decisions to senior engineers, security architecture, or leadership as appropriate.
• Prepare clear status updates, process documentation, and stakeholder communications related to IAM governance initiatives.
• Contribute to team knowledge sharing and continuous improvement of IAM standards, procedures, and controls.

• 3 or more years of experience in Identity and Access Management, information security, IT operations, application administration, audit support, or related technology/control environment.
• Working knowledge of IAM concepts, including identity lifecycle management, access reviews, role-based access control, least privilege, segregation of duties, and privileged access management.
• Experience working with Microsoft Entra  / Azure AD, Active Directory, Microsoft 365, or similar enterprise identity and directory platforms.
• Ability to analyze groups, permissions, ownership, and access dependencies and translate findings into practical governance recommendations.
  Understanding audit, privacy, regulatory, and internal control objectives related to access management and identity governance.
• Familiarity with authentication and identity integration concepts such as SSO, MFA, SAML, OAuth, OpenID Connect, SCIM, and federation is preferred.
• Experience documenting processes, procedures, standards, and control evidence in a clear and maintainable manner.
• Ability to collaborate with Security, Infrastructure, Application, Audit, Compliance, and business stakeholders to resolve access governance questions.
• Strong attention to detail, data quality, follow-through, and organizational skills when managing inventories, review cycles, and remediation tracking
• Ability to communicate technical access concepts in clear language for both technical and non-technical audiences.
• Familiarity with scripting, reporting, Microsoft Graph, Power Shell, Excel, or data analysis tools is preferred but not required.
• Experience with identity governance…