IAM Assurance & Enablement Analyst III

GM Financial•Arlington, TX

3d•Hybrid

About The Position

The IAM Assurance & Enablement Analyst III supports enterprise-wide identity and access management (IAM) standards through proactive enablement, exception oversight, and operational alignment. The role helps deliver scalable IAM solutions by maintaining visibility into identity lifecycle processes, managing exceptions, and collaborating across teams to promote consistent IAM practices. It reports to the IAM Assurance & Enablement Manager. The position supports monitoring of Joiner, Mover, Leaver (JML) processes and development of dashboards showing IAM posture and risk indicators. It performs IAM control oversight, evidence collection, and continuous monitoring for regulatory, audit, and governance requirements; supports IT risk and control exception governance; and helps identify and manage control gaps. The role also establishes entitlement ownership, evolves IAM standards, promotes compliance for applications, and assists with risk exceptions and access review oversight. The analyst partners with IAM Product, Engineering, Operations, Support, and Integration teams to enable and deliver IAM services. The role communicates project and issue status to department leadership, supports oversight and quality control activities, helps resolve service-delivery issues, and assists with compliance assessments and corrective actions.

Requirements

Proven experience in IAM, cybersecurity, or IT risk management.
Strong understanding of IAM technologies and patterns, including Okta, SailPoint, Active Directory, and CyberArk.
Experience with dashboard creation and data visualization tools.
Familiarity with compliance frameworks and exception handling.
Experience with IAM provisioning and governance, including AD, Okta, SailPoint, or CyberArk.
Experience with IAM architecture and role design in multi-account environments, such as AWS IAM roles via Account Vending Machine.
Experience with SOX compliance and access-control risk mitigation.
Experience leading cross-functional IAM initiatives and managing backlogs through platforms such as ServiceNow.
Familiarity with SSO and MFA implementations, machine-to-machine access patterns, and IAM rules of engagement and onboarding protocols.
Advanced understanding of IT Service Management (ITSM) best practices and processes.
High-level understanding of technology infrastructure, security concepts, and platforms.
Demonstrated project management success.
Knowledge of current security and privacy legislation, regulations, advisories, alerts, and vulnerabilities.
Knowledge of the ServiceNow platform.
Exposure to CI/CD and continuous improvement or continuous delivery practices, including Agile, Scrum, or ITIL.
Exposure to cloud applications.
Strong analytical, problem-solving, and decision-making abilities; resourcefulness in recognizing opportunities and alternatives.
Effective verbal and written communication skills, including clear, concise communication, active listening, and effective writing.
Innovative and creative approach to challenges and process improvement.
Proficiency in technical writing and documentation tools, including Visio and Microsoft Office Suite.
Detail-oriented, quick to learn, self-starting, and capable of strong data reconciliation.
4–6 years of experience in IT Security, information systems, audit, or risk and compliance.
High school diploma or equivalent required.

Nice To Haves

Experience in data analytics.
Bachelor’s degree in a related field or equivalent experience preferred.

Responsibilities

Support monitoring of Joiner, Mover, Leaver (JML) processes and develop dashboards that provide visibility into IAM posture and risk indicators.
Perform IAM control oversight, evidence collection, and continuous monitoring to support regulatory, audit, and governance requirements.
Manage IT risk and control exception (ITRE/CRE) governance, including visibility, tracking, reporting, and timely escalation of risks.
Provide first-line IAM risk and governance support by promoting proactive identification and management of control gaps.
Establish and maintain clear ownership of IAM entitlements and related governance activities.
Define and evolve IAM standards in alignment with cyber and enterprise policies.
Enforce compliance for non-compliant applications and promote consistent application of IAM patterns such as AD, CyberArk, Okta, and SailPoint.
Assist with risk exceptions, ensuring appropriate documentation, tracking, and resolution.
Provide access review oversight.
Partner with IAM Product, Engineering, Operations, Support, and Integration teams to support onboarding, enablement, and delivery of IAM services.
Communicate the status of projects, problems, and issues to the department manager and AVP.
Support oversight, quality control, and continuous monitoring activities to resolve issues affecting IAM delivery.
Assist with compliance assessments and initiate corrective actions as needed.