Information Security Analyst II

Job Responsibilities:

Access Review Management: Lead and execute periodic access reviews (certifications) within the SailPoint platform, coordinating with data owners and application teams to validate user access rights. Compliance & Audit: Ensure the IAM program adheres to internal policies and external regulatory requirements (e.g., SOX, HIPAA, GDPR, NIST). Act as the primary liaison for internal and external auditors, providing necessary documentation and evidence of compliance. Governance & Policy: Develop, implement, and maintain IAM governance processes, policies, and procedures. Enforce the principle of least privilege across enterprise systems. Process Optimization: Identify and implement opportunities for process improvements and automation within the IAM lifecycle (joiner, mover, leaver processes), especially regarding access reviews. Role Management: Facilitate business process design related to managing identities and access privileges, including defining access policies and role mining for RBAC. Stakeholder Collaboration: Engage with cross-functional teams (IT, business stakeholders, security, HR) to gather requirements, resolve complex access issues, and align IAM solutions with business objectives. Troubleshooting & Support: Serve as a subject matter expert for complex issue resolution and performance optimization of SailPoint deployments. Documentation & Mentorship: Create and maintain comprehensive technical documentation and standard operating procedures (SOPs) and provide guidance and training to junior analysts and stakeholders. Skills:

Experience: Typically, 5+ years of experience in IAM, with significant hands-on experience in SailPoint IdentityIQ or Identity Now. Prior leadership experience is often required. Technical Proficiency: Strong understanding of SailPoint configurations, workflows, tasks, and rules. Experience with integrating SailPoint with various systems like Active Directory (AD), LDAP, and cloud platforms (AWS, Azure) is essential. Analytical Skills: High attention to detail, strong analytical thinking, and problem-solving abilities to translate business requirements into technical IAM solutions. Communication: Excellent interpersonal and communication skills to convey complex technical concepts to non-technical stakeholders and manage client relationships. Certifications: While not always required, professional certifications like Certified Identity and Access Manager (CIAM) or SailPoint-specific credentials such as SailPoint Certified Identity Now Engineer are highly valued. Compliance Knowledge: In-depth knowledge of IAM frameworks, protocols (e.g., SAML, OAuth), and industry compliance standards SailPoint IdentityIQ or Identity Now, IAM frameworks, Active Directory (AD), LDAP, and cloud platforms (AWS, Azure) , audit evidence, access certification (review) campaigns Education/Experience:

Bachelor’s degree in engineering or related field required.