IAM Assurance & Enablement Analyst III

GM Financial•Arlington, TX

2d•Hybrid

About The Position

The IAM Assurance & Enablement Analyst III supports enterprise-wide identity and access management (IAM) standards through proactive enablement, exception oversight, and operational alignment. The role helps deliver scalable IAM solutions by providing visibility into identity lifecycle processes, managing exceptions, and collaborating across teams to promote consistent implementation of IAM practices. The position reports to the IAM Assurance & Enablement Manager. The analyst supports monitoring of Joiner, Mover, Leaver processes and development of dashboards that show IAM posture and risk indicators. The role provides IAM control oversight, evidence collection, and continuous monitoring for regulatory, audit, and governance needs; manages IT risk and control exception governance; and supports identification and management of control gaps. It also helps define IAM standards, enforce compliance for non-compliant applications, maintain ownership of entitlements, and document, track, and resolve risk exceptions. The analyst partners with IAM Product, Engineering, Operations, Support, and Integration teams to support IAM service onboarding, enablement, and delivery. The position also communicates project and issue status, supports oversight and quality control activities, resolves barriers to effective IAM delivery, and assists with compliance assessments and corrective actions.

Requirements

4–6 years of experience in IT Security, information systems, audit, or risk and compliance roles.
High school diploma or equivalent.
Proven experience in IAM, cybersecurity, or IT risk management.
Strong understanding of IAM technologies and patterns, such as Okta, SailPoint, Active Directory, and CyberArk.
Experience with dashboard creation and data visualization tools.
Familiarity with compliance frameworks and exception handling.
Experience with IAM provisioning and governance, including AD, Okta, SailPoint, or CyberArk.
Experience with IAM architecture and role design in multi-account environments, such as AWS IAM roles via Account Vending Machine.
Experience with SOX compliance and access-control risk mitigation.
Experience leading cross-functional IAM initiatives and managing backlogs using platforms such as ServiceNow.
Advanced understanding of IT Service Management (ITSM) best practices and processes.
High-level understanding of technology infrastructure, security concepts, and platforms.
Demonstrated project management success.
Knowledge of security and privacy legislation, regulations, advisories, alerts, and vulnerabilities, and ability to stay current with them.
Strong analytical, problem-solving, and decision-making abilities.
Effective verbal and written communication skills, including clear, concise communication, active listening, and effective technical writing.
Proficient in technical writing and documentation tools, including Visio and Microsoft Office Suite.
High attention to detail, ability to learn quickly and work independently, and strong data reconciliation capabilities.

Nice To Haves

Experience in data analytics.
Bachelor’s degree in a related field or equivalent experience.
Familiarity with SSO and MFA implementations.
Familiarity with machine-to-machine access patterns.
Familiarity with IAM rules of engagement and onboarding protocols.
Knowledge of the ServiceNow platform.
Exposure to CI/CD and Agile, Scrum, or ITIL practices.
Exposure to cloud applications.
Innovative and creative approach to improving processes.

Responsibilities

Monitor Joiner, Mover, Leaver processes and support dashboards that show IAM posture and risk indicators.
Perform IAM control oversight, collect evidence, and conduct continuous monitoring for regulatory, audit, and governance requirements.
Manage IT risk and control exception governance, including visibility, tracking, reporting, and timely escalation.
Promote proactive identification and management of IAM control gaps.
Establish and maintain clear ownership of IAM entitlements and related governance activities.
Define and evolve IAM standards in alignment with cyber and enterprise policies.
Enforce compliance for non-compliant applications and support consistent application of IAM patterns such as AD, CyberArk, Okta, and SailPoint.
Assist with risk exceptions, ensuring appropriate documentation, tracking, and resolution.
Partner with IAM Product, Engineering, Operations, Support, and Integration teams on IAM service onboarding, enablement, and delivery.
Communicate the status of projects, problems, and issues to the department manager and AVP.
Support oversight, quality control, and continuous monitoring activities to resolve issues affecting IAM delivery.
Assist with compliance assessments and initiate corrective actions as needed.