Pro members applied to this job 36 hours before you saw itGet Pro ›

meridianlink - Senior IAM Governance Analyst

Remote - US Remote2d ago

Remote Senior NA Cybersecurity Governance Analyst Stakeholder Management Governance Reporting

Requirements

• This role partners closely with Security, IT, Engineering, HR, and application owners to ensure access governance controls support MeridianLink's SOC 2, PCI DSS, financial audit, customer assurance, and regulatory obligations. • · 5+ years of experience in Identity and Access Management, Information Security, IT Audit, or Governance, Risk & Compliance. • · 3+ years of experience leading User Access Reviews, access certification campaigns, or identity governance programs. • · Strong understanding of identity lifecycle management, role-based access controls, privileged access concepts, entitlement analysis, and access governance best practices. • · Experience supporting compliance and audit initiatives such as SOC, PCI DSS, SOX, ISO 27001, or similar regulatory and control frameworks. • · Strong analytical, communication, and stakeholder management skills with the ability to influence decisions and challenge ineffective review practices.

Responsibilities

• · Own the enterprise User Access Review (UAR) program from planning and execution through remediation, reporting, and continuous improvement. • · Coordinate periodic access reviews across applications, infrastructure, cloud platforms, and privileged access environments while partnering with business and system owners to ensure access remains appropriate. • · Assess completed reviews for quality and effectiveness, identify excessive access, orphaned accounts, segregation of duties concerns, and other access-related risks, and drive remediation activities to completion. • · Identify gaps in application ownership, certification coverage, entitlement governance, and privileged access oversight. • · Partner with IAM, Security, Engineering, Compliance, and Audit teams to improve governance processes, support audits and assessments, and strengthen MeridianLink's access management controls.