Manager, IAM & SOX Business Analyst

Kroll • Morristown, NJ

1d

About The Position

We are seeking an experienced IAM Business Analyst to support and advise enterprise clients on identity and access management programs. This role combines strong IAM domain knowledge, SOX ITGC experience, assessment and roadmap support, and hands-on execution capabilities across access governance, Active Directory, cloud identity, and non‑human identities. The ideal candidate will be comfortable operating independently, engaging senior stakeholders, and contributing to both strategic and execution-focused IAM engagements.

Requirements

• 6+ years of experience in Identity & Access Management, cybersecurity, or related technology risk roles.
• Strong knowledge of SOX IT General Controls (ITGCs) with a focus on IAM-related controls.
• Demonstrated experience supporting and executing User Access Reviews in regulated environments.
• Experience participating in or supporting IAM assessments, roadmap, and strategy engagements.
• Hands-on or functional knowledge of: Saviynt, Microsoft Entra ID (Azure AD), Active Directory
• Experience with non-human identity assessments, including use of tools such as Oasis.
• Experience conducting directory and identity posture assessments using Falcon Identity (AD and Entra ID).
• Strong analytical, documentation, and presentation skills.
• Proven ability to manage multiple workstreams and stakeholders simultaneously.

Responsibilities

• Support SOX IT General Controls (ITGCs) related to Identity and Access Management.
• Assist with the planning, coordination, and execution of User Access Reviews (UARs), including evidence collection, remediation tracking, and auditor-facing documentation.
• Partner with client compliance, audit, and security teams to ensure IAM-related controls are properly designed and operating effectively.
• Independently advise clients on IAM strategy, operating models, and multi-year roadmaps aligned to business and regulatory requirements.
• Assist in conducting IAM maturity assessments, current-state evaluations, and gap analyses across workforce, privileged, and non-human identities.
• Contribute to the development of IAM roadmap deliverables, including initiative prioritization, sequencing, and dependency mapping.
• Leverage hands-on knowledge of IAM platforms such as Saviynt, Microsoft Entra ID (Azure AD), and Active Directory to support assessments, process design, and control evaluations.
• Support and execute non-human identity (NHI) assessments using tools such as Oasis, including service accounts, application identities, and machine identities.
• Conduct identity and directory security assessments using Falcon Identity for Active Directory and Entra ID, including analysis of findings and recommendations for remediation and risk reduction.
• Act as a key liaison between business stakeholders, IT teams, security, and audit functions.
• Lead and facilitate requirements-gathering sessions, assessment workshops, and stakeholder interviews.
• Produce high-quality client-facing artifacts including assessment reports, roadmaps, executive summaries, and status updates.
• Support IAM engagement planning, milestone tracking, issue/risk management, and dependency coordination.
• Contribute to delivery governance through clear communication, documentation, and proactive issue resolution.

Benefits

• Healthcare Coverage: Comprehensive medical, dental, and vision plans.
• Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.
• Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.
• Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.
• Retirement Plans: 401(k) plans with company matching.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed
• Number of Employees: 1,001-5,000 employees