Identity Access & User Rights Review Manager

Renasant Bank•Tupelo, MS

54d•Hybrid

About The Position

The Identity Access & User Rights Review Manager leads the enterprise program responsible for ensuring that logical access controls, user provisioning and entitlement reviews are conducted in accordance with regulatory expectations, internal policy and industry best practices. The Identity Access & User Rights Review Manager will manage a team of analysts, drive program strategy and serve as the primary liaison between Risk Management, Information Security, Internal Audit and line-of-business management on access governance matters. The location listed is preferred office location but other locations and working remotely within the Renasant footprint may be considered based upon convenience and business necessity.

Requirements

Bachelor's degree required; Information Security, Computer Science, Business Administration, Risk Management or related field preferred
Minimum of 7 years of experience in identity and access management, IT risk, information security or IT audit within financial services
Minimum of 3 years of direct people management experience
Professional certifications preferred: CISA, CISM, CISSP, CRISC, or equivalent
Strong understanding of regulatory frameworks: FFIEC, GLBA, SOX (IT General Controls), NIST CSF, CIS Controls
Good knowledge of IAM/IGA platforms (SailPoint, Saviynt, CyberArk, Okta, Azure AD/Entra ID, or equivalent)
Familiar with core banking systems, lending platforms and enterprise applications common to community/regional banking
Ability to communicate technical access governance concepts to non-technical senior leadership
Ability to think strategically and translate regulatory requirements into executable programs
Strong project management and ability to manage multiple concurrent recertification campaigns
Excellent stakeholder management across technology, business and risk functions
Analytical rigor with data-driven approach to exception management and risk prioritization
Ability to drive accountability with application owners and business line managers

Responsibilities

Lead and manage the enterprise User Access Review (UAR) program, including periodic recertification cycles for all critical applications, systems and data repositories
Develop, maintain and enhance policies, procedures and standards governing identity and access management (IAM) reviews
Oversee quarterly, semi-annual and annual user rights recertification campaigns across all business units and technology platforms
Ensure timely identification, escalation and remediation of access violations, excessive privileges, segregation of duties (SoD) conflicts and orphaned accounts
Manage and develop a team of Identity Access Analysts, providing coaching, performance feedback and career development guidance
Collaborate with Information Security, IT Operations, and application owners to maintain accurate role-based access control (RBAC) frameworks
Partner with Internal Audit and Compliance to address examination findings, regulatory expectations (OCC/FDIC/Fed guidance, FFIEC) and audit recommendations related to access governance
Produce executive-level reporting on access review completion rates, exception trends, SoD violations and program health metrics for Risk Committee and Board-level consumption
Drive continuous improvement through automation, tooling enhancements and integration with identity governance platforms (e.g., SailPoint, Saviynt, CyberArk, or equivalent)
Coordinate with HR and business managers to ensure joiners, movers and leavers (JML) processes are properly reflected in access entitlements
Lead incident response coordination when unauthorized access or privilege escalation events are identified
Maintain awareness of regulatory changes, industry trends, and emerging threats related to identity access risk
Perform other related duties as assigned