Identity & Access Governance Administrator (Hybrid/Miami Lakes)

Identity & Access Governance Administrator

The Identity & Access Governance Administrator is responsible for administering and enforcing identity and access governance controls across the organization. This role ensures that access to systems, applications, and data is provisioned, maintained, and revoked in accordance with established policies, regulatory requirements, and security best practices. The position supports the full identity lifecycle and plays a key role in access reviews, reduced business risk, Q&A (quality and assurance), audit readiness, RBAC enforcement, and compliance with enterprise security standards.

Essential duties and responsibilities include the following. Other duties and special projects may be assigned.

• Access Reviews & Certification:
• Executes and supports periodic user access reviews and certification campaigns to validate access appropriateness and alignment with the least privilege principle
• Maintains and tracks policy exception reports and access violations
• Performs governance validation over user provisioning, de-provisioning, and access changes across systems and applications to ensure alignment with approved requests and policies
• Validates that access is granted based on role-based access control (RBAC) models and least privilege principles
• Reviews of ITSM tickets and service requests related to access management
• Audit & Compliance:
• Collaborates with internal and external auditors to provide evidence and support IAM-related audit requests
• Ensures compliance with applicable regulatory frameworks (e.g., SOX, GLBA, NIST guidelines) and internal control standards
• Maintains documentation of IAM policies, procedures, and control evidence
• Tracks and reports on audit findings, observations, and remediation activities related to access management
• Governance & Policy Enforcement:
• Enforces IAM governance controls for access requests and approvals
• Validates appropriate approval chains (manager, application owner, data owner) prior to provisioning
• Ensures adherence to access control standards and segregation of duties (SoD) requirements
• Validates governance controls over non-human identities (e.g. service accounts, application accounts, service credentials)
• Monitoring, Reporting & Risk Management:
• Monitors user access activity and identify anomalous or unauthorized access
• Generates and maintains reports on user access, entitlements, and overall compliance posture
• Supports identification, tracking, and remediation of access issues, violations, and control deficiencies
• Develops, tracks, and reports Key Risk Indicators (KRIs) and access governance metrics
• Escalates non-compliance, controls gaps, and unresolved access issues to management
• Process Improvement & Automation:
• Identifies process gaps and recommend improvements in IAM workflows and controls
• Supports automation initiatives (e.g., SailPoint workflows, access lifecycle automation, certification campaigns)
• Contributes to IAM program maturity initiatives, including RBAC, non-human identity governance, and access governance enhancements
• Adheres to and complies with applicable, federal and state laws, regulations and guidance, including those related to anti-money laundering (i.e. Bank Secrecy Act, US PATRIOT Act, etc.)
• Adheres to Bank policies and procedures and completes required training.
• Identifies and reports suspicious activity.

Education:

Bachelor's Degree in Information Technology, Cybersecurity, or related field (or equivalent experience) required

Experience:

• 3+ years of experience in Identity & Access Management or Information Security required
• Experience supporting access provisioning, access reviews, and audit/compliance activities required
• Experience with tools such as: Active Directory / Azure AD, ServiceNow, SQL, Excel Advance skills, SailPoint or equivalent IAM platform, and SSO, MFA, and authentication technologies preferred

Certificates, Licenses, Registrations:

• CISSP, CISM, or equivalent security certification preferred
• CIAM, SailPoint, or IAM-related certifications preferred

Knowledge, Skills and Abilities:

• Excel Skills (Intermediate/Advance) capability to process Automation, Complex Analytic, Advance Formula & functions, required.
• Strong understanding of IAM concepts: Identity lifecycle management, RBAC (Role-Based Access Control), Access certifications, and Privileged access management
• Strong attention to detail and ability to manage sensitive access controls
• Analytical thinking and problem-solving skills
• Strong communication and stakeholder engagement
• Ability to work in a regulated, audit-driven environment
• Commitment to security, compliance, and risk management

Additional Information:

• Candidates residing in locations within BankUnited's footprint may be given preference.