Identity and Access Management Specialist

NightOwl Consulting

About The Position

The Identity and Access Management Specialist is responsible for the secure and compliant administration of user identities and access rights for employees across internal and vendor- provided systems. This role ensures appropriate access provisioning, deprovisioning, and oversight, with a strong emphasis on security, operational integrity, and regulatory compliance. Ideal candidates for this position have proven experience in identity and access management, strong problem-solving skills, and work well across organizational boundaries.

Requirements

Working knowledge of regulatory and compliance frameworks, including SOX, NYDFS, and other applicable security and governance requirements.
Strong understanding of Identity and Access Management (IAM) principles, frameworks, processes, and supporting technologies.
Excellent written and verbal communication skills, with the ability to collaborate effectively across technical and non-technical teams.
Strong analytical, problem-solving, and documentation skills, with the ability to identify issues, assess risks, and implement effective solutions.
Proven ability to prioritize competing responsibilities, manage multiple projects simultaneously, and meet deadlines in a fast-paced environment.
High attention to detail and a commitment to maintaining accuracy, security, and compliance in all aspects of access management.
Minimum of three (3) years of experience in Identity and Access Management (IAM), Information Security, Cybersecurity, or a related IT security function.
Experience performing access reviews, user provisioning and deprovisioning, account lifecycle management, and access control administration.

Nice To Haves

Experience supporting risk assessment, risk mitigation, and security governance initiatives related to identity management is preferred.
Familiarity with audit processes, compliance reviews, and regulatory requirements within a controlled or regulated environment is a plus.

Responsibilities

Develop, implement, and enforce access control policies, standards, and procedures to support organizational security, compliance, and governance requirements.
Manage employee accounts and access permissions across internal and third-party systems, ensuring timely and accurate provisioning, modification, and deprovisioning of user access.
Partner with Human Resources, department managers, and system owners to ensure access rights are appropriately aligned with job responsibilities and business needs.
Ensure all access requests, changes, and removals are properly documented, approved, and maintained in accordance with established security policies and audit requirements.
Prepare monthly and quarterly access review reports, conduct regular audits of user permissions, and identify, assess, and remediate risks associated with excessive, outdated, or inappropriate access.
Respond to and resolve access-related incidents, service requests, and account management issues in a timely and professional manner.
Investigate security incidents, unauthorized access attempts, and suspicious account activity, escalating concerns and supporting remediation efforts as needed.
Monitor emerging trends, technologies, and best practices in Identity and Access Management (IAM), recommending process improvements and security enhancements to strengthen access controls.
Collaborate with internal stakeholders to support compliance initiatives, security audits, and regulatory requirements related to user access management.
Perform other duties and responsibilities as assigned.