Identity Process and Compliance Analyst

My name is Stephen Hrutka. I lead a Veteran-Owned management consulting firm in Washington, DC. We specialize in Technical and Cleared Recruiting for the Department of Defense (DoD), the Intelligence Community (IC), and other advanced defense agencies.

At HRUCKUS, we support fellow Veteran-Owned businesses by helping them recruit for positions across organizations such as the VA, SBA, HHS, DARPA, and other leading-edge R&D-focused defense agencies.

We seek to fill an Identity Process and Compliance Analyst role in Remote, US

Thanks,

HRUCKUS is looking for an experienced Identity Process and Compliance Analyst to evaluate, improve, document, and maintain identity and access management (IAM) processes, policies, and controls.

This role focuses on identifying gaps between existing IAM procedures, actual operating practices, regulatory requirements, and industry standards. The analyst will recommend practical improvements, strengthen audit readiness, and help implement sustainable IAM governance processes.

• Review IAM policies, standards, procedures, runbooks, and approval workflows.
• Evaluate identity lifecycle processes, including onboarding, role changes, and offboarding.
• Assess access requests, approvals, privileged access, emergency access, service accounts, and access reviews.
• Identify gaps between documented controls and actual operating practices.
• Translate compliance requirements and audit observations into actionable process improvements.
• Develop and maintain process maps, control narratives, procedures, runbooks, and work instructions.
• Define process ownership, approval matrices, and evidence requirements.
• Coordinate process reviews with IAM, infrastructure, applications, HR, security, audit, and compliance teams.
• Support audit preparation, evidence collection, control testing, and remediation tracking.
• Develop process metrics, control indicators, and reporting requirements.
• Maintain documentation version control, ownership, and review schedules.
• Support change management, stakeholder communications, training, and process adoption.

• 5+ years of experience in IAM governance, cybersecurity compliance, IT audit, risk management, IT process analysis, or a related discipline.
• Experience reviewing and improving IAM policies, procedures, runbooks, and operating practices.
• Experience evaluating documented procedures and operational practices to identify control gaps.
• Understanding of joiner, mover, and leaver processes, access approvals, access reviews, privileged access, and least privilege.
• Strong process mapping and technical documentation experience.
• Ability to identify control gaps and recommend practical improvements.
• Experience interpreting audit findings, regulatory requirements, and control objectives.
• Understanding of IT general controls, evidence requirements, remediation, and control testing.
• Experience supporting audit readiness and compliance activities.
• Strong experience creating process maps, procedures, control narratives, work instructions, and remediation plans.
• Ability to facilitate discussions across technical and business teams.
• Working knowledge of identity lifecycle management, Joiner/mover/leaver processes, access requests and approvals, privileged access management, access certifications and reviews, segregation of duties, least-privilege principles, and service…