Identity Access & User Rights Review Manager

Identity Access & User Rights Review Manager

Job :

Job Location s: US-MS-Tupelo

The Identity Access & User Rights Review Manager leads the enterprise program responsible for ensuring that logical access controls, user provisioning and entitlement reviews are conducted in accordance with regulatory expectations, internal policy and industry best practices. The Identity Access & User Rights Review Manager will manage a team of analysts, drive program strategy and serve as the primary liaison between Risk Management, Information Security, Internal Audit and line-of-business management on access governance matters.

Location listed is preferred office location but other locations and working remotely within the Renasant footprint may be considered based upon convenience and business necessity.

RENASANT BANK IS AN EQUAL OPPORTUNITY EMPLOYER

• Lead and manage the enterprise User Access Review (UAR) program, including periodic recertification cycles for all critical applications, systems and data repositories
• Develop, maintain and enhance policies, procedures and standards governing identity and access management (IAM) reviews
• Oversee quarterly, semi-annual and annual user rights recertification campaigns across all business units and technology platforms
• Ensure timely identification, escalation and remediation of access violations, excessive privileges, segregation of duties (SoD) conflicts and orphaned accounts
• Manage and develop a team of Identity Access Analysts, providing coaching, performance feedback and career development guidance
• Collaborate with Information Security, IT Operations, and application owners to maintain accurate role-based access control (RBAC) frameworks
• Partner with Internal Audit and Compliance to address examination findings, regulatory expectations (OCC/FDIC/Fed guidance, FFIEC) and audit recommendations related to access governance
• Produce executive-level reporting on access review completion rates, exception trends, SoD violations and program health metrics for Risk Committee and Board-level consumption
• Drive continuous improvement through automation, tooling enhancements and integration with identity governance platforms (e.g., SailPoint, Saviynt, Cyber Ark, or equivalent)
• Coordinate with HR and business managers to ensure joiners, movers and leavers (JML) processes are properly reflected in access entitlements
• Lead incident response coordination when unauthorized access or privilege escalation events are identified
• Maintain awareness of regulatory changes, industry trends, and emerging threats related to identity access risk
• Perform other related duties as assigned

• Bachelor's degree required;
  Information Security, Computer Science, Business Administration, Risk Management or related field preferred
• Minimum of 7 years of experience in identity and access management, IT risk, information security or IT audit within financial services
• Minimum of 3 years of direct people management experience
• Professional certifications preferred: CISA, CISM, CISSP, CRISC, or equivalent
• Strong understanding of regulatory frameworks: FFIEC, GLBA, SOX (IT General Controls), NIST CSF, CIS Controls
• Good knowledge of IAM/IGA platforms (SailPoint, Saviynt, Cyber Ark, Okta, Azure AD/Entra , or equivalent)
• Familiar with core banking systems, lending platforms and enterprise applications common to community/regional banking
• Ability to communicate technical access governance concepts to non-technical senior leadership
• Ability to think strategically and translate regulatory requirements into executable programs
• Strong project management and ability to manage multiple concurrent recertification campaigns
• Excellent stakeholder management across technology, business and risk…