Identity & Access Governance Administrator (Hybrid/Miami Lakes)

BankUnited, Inc.•Miami Lakes, FL

4d•Hybrid

About The Position

The Identity & Access Governance Administrator is responsible for administering and enforcing identity and access governance controls across the organization. This role ensures that access to systems, applications, and data is provisioned, maintained, and revoked in accordance with established policies, regulatory requirements, and security best practices. The position supports the full identity lifecycle and plays a key role in access reviews, reduced Business Risk, Q&A (quality and Assurance), audit readiness, RBAC enforcement, and compliance with enterprise security standards.

Requirements

Bachelor's Degree in Information Technology, Cybersecurity, or related field (or equivalent experience) required
3+ years of experience in Identity & Access Management or Information Security required
Experience supporting access provisioning, access reviews, and audit/compliance activities required
Excel Skills (Intermediate/Advance) capability to process Automation, Complex Analytic, Advance Formula & functions, required.
Strong understanding of IAM concepts: Identity lifecycle management, RBAC (Role-Based Access Control), Access certifications, and Privileged access management
Strong attention to detail and ability to manage sensitive access controls
Analytical thinking and problem-solving skills
Strong communication and stakeholder engagement
Ability to work in a regulated, audit-driven environment
Commitment to security, compliance, and risk management

Nice To Haves

Experience with tools such as: Active Directory / Azure AD, ServiceNow, SQL, Excel Advance skills, SailPoint or equivalent IAM platform, and SSO, MFA, and authentication technologies preferred
CISSP, CISM, or equivalent security certification preferred
CIAM, SailPoint, or IAM-related certifications preferred

Responsibilities

Executes and supports periodic user access reviews and certification campaigns to validate access appropriateness and alignment with the least privilege principle
Maintains and tracks policy exception reports and access violations
Performs governance validation over user provisioning, de-provisioning, and access changes across systems and applications to ensure alignment with approved requests and policies
Validates that access is granted based on role-based access control (RBAC) models and least privilege principles
Reviews of ITSM tickets and service requests related to access management
Collaborates with internal and external auditors to provide evidence and support IAM-related audit requests
Ensures compliance with applicable regulatory frameworks (e.g., SOX, GLBA, NIST guidelines) and internal control standards
Maintains documentation of IAM policies, procedures, and control evidence
Tracks and reports on audit findings, observations, and remediation activities related to access management
Enforces IAM governance controls for access requests and approvals
Validates appropriate approval chains (manager, application owner, data owner) prior to provisioning
Ensures adherence to access control standards and segregation of duties (SoD) requirements
Validates governance controls over non-human identities (e.g. service accounts, application accounts, service credentials)
Monitors user access activity and identify anomalous or unauthorized access
Generates and maintains reports on user access, entitlements, and overall compliance posture
Supports identification, tracking, and remediation of access issues, violations, and control deficiencies
Develops, tracks, and reports Key Risk Indicators (KRIs) and access governance metrics
Escalates non-compliance, controls gaps, and unresolved access issues to management
Identifies process gaps and recommend improvements in IAM workflows and controls
Supports automation initiatives (e.g., SailPoint workflows, access lifecycle automation, certification campaigns)
Contributes to IAM program maturity initiatives, including RBAC, non-human identity governance, and access governance enhancements
Adheres to and complies with applicable, federal and state laws, regulations and guidance, including those related to anti-money laundering (i.e. Bank Secrecy Act, US PATRIOT Act, etc.)
Adheres to Bank policies and procedures and completes required training
Identifies and reports suspicious activity