IAM Analyst (REMOTE OR MA BASED)

The Hanover Insurance Group•Worcester, MA

1d•Remote

About The Position

For more than 170 years, The Hanover has been committed to delivering on our promises and being there when it matters the most. We live our values every day, demonstrating we CARE through our values, Sustainability initiatives and inclusive corporate culture. We are seeking an experienced IAM Analyst to join our IT Security team, in our Worcester, MA office or remote work arrangement This is a full-time, exempt role. POSITION OVERVIEW: The IAM Analyst role will focus on information security controls and Identity & Access Management (IAM) operations. This position is responsible for ensuring effective execution of IAM control standards across the organization, with a strong emphasis on identifying control procedure owners, validating control documentation, and supporting operational teams involved in access provisioning, account administration, and identity governance activities. This role also serves as a key escalation point for the IAM Account Administration team and works closely with cross-functional partners involved in lifecycle management, audit readiness, Azure licensing, and network identity services.

Requirements

3–5+ years of hands-on IAM experience (engineering, governance, operations, or hybrid).
Strong understanding of IAM control frameworks (e.g., NIST CSF, ISO 27001, SOX, PCI).
Experience with Active Directory, Azure AD/Microsoft Entra ID, and identity provisioning platforms such as OIM or Saviynt.
Familiarity with audit processes, evidence collection, and control documentation.
Strong troubleshooting skills and experience resolving escalated access issues.
Excellent communication and stakeholder engagement skills.
Ability to manage multiple priorities in a fast-paced environment.
Bachelor’s degree in Information Security or related field (or equivalent experience).
Must be eligible to work in the US without requiring sponsorship now or in the future (i.e Lawful Permanent Residence or US Citizen)

Responsibilities

Maintain deep expertise in IAM control standards, frameworks, and regulatory expectations.
Identify and engage appropriate control procedure owners across technology and business areas.
Review IAM control procedures for completeness, accuracy, and compliance.
Partner with Audit and Compliance teams to support internal and external audit activities.
Monitor adherence to IAM governance processes, including control testing and remediation activities.
Serve as the escalation point for the IAM Account Administration team on complex access or provisioning issues.
Provide guidance on IAM best practices and drive operational process improvements.
Support timely resolution of high-priority incidents impacting identity services or account access.
Collaborate with the IAM Account Administration team to provide oversight and support in:
Privileged Account approval process
Monitor queue to ensure SLAs are met.
Ensure requests comply with established policies and standards.
Ensure SOPs are active and updated
Weekly self-audit of administrative work related to privileged accounts
Identify and remediate any errors found
Report on findings
Identify any training needed to reduce errors
Implement process improvement to reduce errors and increase compliance
Lifecycle management – privileged accounts
Ensure all steps in the lifecycle are managed in a timely manner and in compliance with Hanver policy & standards.
Resolve assigned IAM-related incidents and service request tickets.
Troubleshoot access issues across applications, network resources, and identity systems.
Partners with IT support teams for escalated authorization or authentication issues.
Maintain governance dashboards and reporting.
Develop operational KPIs and performance metrics.
Communicate process updates, control changes, and governance insights to leadership and stakeholders.