IAM Compliance and Audit Analyst

IAM Compliance and Audit Analyst

Location : Brazil

Job Type : Long-term Contract

Reports To : IAM Compliance Lead

Job Overview:

We are seeking an Associate IAM Compliance and Audit Analyst to join our growing Identity and Access Management (IAM) team. This role is focused on conducting periodic access reviews, validating user access controls, and ensuring compliance with security policies and regulatory requirements. The successful candidate will have hands-on experience with IdentityNow campaign staging , be familiar with user access reviews, and have foundational knowledge of compliance frameworks such as SOX , SOC 2 , NIST , and HIPAA . This position is ideal for someone with 2–4 years of experience in IAM or audit compliance roles looking to grow their expertise in a fast-paced environment.

Key Responsibilities:

• Conduct periodic access reviews and audits to ensure compliance with security policies, internal standards, and external regulations.
• Perform IdentityNow campaign staging for access reviews across multiple platforms including Active Directory, Databases, Workday, and Servers .
• Assist in the development and execution of user access review processes and support the resolution of access discrepancies.
• Work with internal teams to gather and present control evidence to auditors, ensuring compliance with frameworks such as SOX , SOC 2 , NIST , and HIPAA .
• Collaborate with the IAM department to validate and analyze user access controls and ensure alignment with internal policies.
• Contribute to the planning and execution of audit remediation activities, working to correct any identified issues.
• Support the development of automated monitoring capabilities to gather audit evidence and provide real-time compliance reporting.
• Ensure all IAM controls are effectively tested and results are accurately reported in a timely manner.
• Maintain documentation for IAM processes, access reviews, and audit activities.
• Collaborate across multiple teams to ensure compliance goals are met and IAM best practices are followed.

Required Skills and Qualifications:

• 2–4 years of experience in IAM, audit, or security compliance roles, preferably with exposure to SOX/SOC 2 audits.
• Hands-on experience staging access review campaigns in SailPoint IdentityNow or a similar IAM platform.
• Basic understanding of compliance frameworks such as SOX , SOC 2 , NIST , and HIPAA , including their relevance to IAM processes.
• Familiarity with user access reviews , understanding access validation, and resolving access discrepancies.
• Knowledge of IAM principles , such as role-based access control (RBAC), the principle of least privilege, and access lifecycle management.
• Strong analytical and problem-solving skills with the ability to assess access control risks and compliance issues.
• Effective communication skills to present findings to both technical and non-technical stakeholders and auditors.
• Familiarity with automated evidence gathering and reporting tools or scripting languages (e.g., PowerShell or Python) is a plus.
• Ability to work within a team environment , contributing to department-wide initiatives and collaborating with multiple teams.
• Attention to detail with the ability to manage multiple tasks, clients, and projects while meeting deadlines.

Preferred Skills:

• Exposure to SOX/SOC1/SOC2 audits covering security, availability, confidentiality, privacy, and processing integrity trust service principles.
• Basic knowledge of automation tools for control monitoring and audit reporting.
• Experience with information risk management and audit remediation processes.
• Customer relationship management and change management experience within an IAM or compliance framework.

Characteristics:

• A strong desire to learn and grow in the IAM space, with a willingness to take on new responsibilities and develop advanced skills.
• Ability to work well under tight deadlines and manage stress in a dynamic work environment.
• Collaborative mindset , with the ability to balance attention to detail with broader team objectives and departmental goals.