Role Summary: The IAM Controls & Compliance Specialist is responsible for designing, implementing, monitoring, and validating IAM controls to ensure compliance with internal policies, regulatory requirements, and audit expectations. The role serves as the primary control assurance function within the IAM operating model.
Key Responsibilities
- IAM Control Framework
- Validate the Design and Operating effectiveness of IAM control standards and control libraries.
- Ensure alignment with regulatory, risk, and cybersecurity requirements.
- Control Monitoring & Testing
- Drive IAM control monitoring programs.
- Establish control effectiveness testing methodologies.
- Track and manage control exceptions and remediation activities.
- Access Governance Compliance
- Assess effectiveness of JML, PAM, and access certification controls.
- Validate segregation of duties (SoD) and least privilege requirements against the compliance with identity lifecycle and privileged access policies.
- Metrics and Assurance Reporting
- Monitor and report on control deficiencies and risk indicators.
- Audit Management
- Support audit reviews and regulatory examinations.
- Maintain control evidence repositories.
- Ensure management actions are effectively implemented and validated.
- Required Skills & Experience
- 3+ years of experience in IAM Controls, IT Risk, IT Audit, Cybersecurity Compliance, or Technology Risk.
- Strong understanding of IAM controls testing, and audit requirements.
- Familiar supporting regulatory, internal audit, or external audit programs.
- Strong analytical and documentation skills.
- Preferred Qualifications
- CRISC, CISM, ISO 27001 Lead Auditor, or equivalent.
- Financial services industry experience.