Information Security Analyst/ Analyst – Identity Governance and Compliance
2 Months ago • 2-4 Years
Cyber Security
Job Description
The Information Security Analyst role focuses on Identity Governance and Compliance within the Governance, Risk & Compliance (GRC) department. Responsibilities include managing User Access Reviews (UAR), ensuring IAM practices align with internal policies and external regulations (PCI DSS, ISO 27001, NIST CSF, COBIT), and maintaining identity governance policies. The analyst will provide expertise on Active Directory, enforce least privilege, and conduct training on security controls. They will also manage SharePoint and Jira for audit readiness, participate in incident management, change control, cloud migrations, SOC operations, and drive continuous improvement in GRC processes. The role requires leading annual security information reviews.
Good To Have:
- CISSP, CISA, CISM, CRISC, or GIAC certifications
- Experience with IAM tools (SailPoint, Saviynt, Okta, Azure AD)
- Experience supporting audits
- Knowledge of GRC tools
- Understanding of FERPA, CIS, data protection laws
- Knowledge of Cloud Identity (AWS or Azure Identity)
Must Have:
- Manage Identity Governance & Compliance activities
- Ensure IAM practices meet policies/regulations
- Maintain identity governance policies
- Subject matter expertise in Active Directory
- Align practices with PCI DSS, ISO 27001, NIST, COBIT
- Enforce least privilege principles
- Bachelor’s degree in Information Security/Computer Science
- 2-4 years of experience in Information Security
- Strong understanding of UAR processes
- Experience with Active Directory
- Familiarity with regulatory frameworks
- Excellent analytical and communication skills
- Ability to work independently and collaboratively
Job Title: Information Security Analyst/ Analyst – Identity Governance and Compliance
Department: Information Security – Governance, Risk & Compliance (GRC)
Experience: Level: 2 – 4 years
Employment Type: Full-time
Key Responsibilities:
• Manage the Identity Governance and compliance activities, including periodic User Access Reviews (UAR) and RBAC activities.
• Ensure IAM practices comply with internal policies and external regulatory requirements.
• Maintain and enhance identity governance policies, standards, and procedures.
• Provide subject matter expertise on Active Directory (AD), including group policies and access provisioning/deprovisioning.
• Align identity governance practices with frameworks such as PCI DSS, ISO 27001, NIST CSF, and COBIT.
• Engage with IT, HR, and business units to enforce least privilege principles and maintain accurate access records.
• Conduct regular training sessions for the SM team on security controls and client requirements.
• Coordinate SME involvement in quarterly meetings and training initiatives.
• Maintain and organize SharePoint and Jira spaces for audit readiness and evidence management.
• Participate in incident management, change control meetings, and cloud migration initiatives.
• Engage in SOC operations and threat tracking.
• Drive continuous improvement initiatives in identity governance and GRC processes.
• Lead the annual review of security information presentations in collaboration with Compliance.
• Manage the Identity Governance and compliance activities, including periodic User Access Reviews (UAR) and RBAC activities.
• Ensure IAM practices comply with internal policies and external regulatory requirements.
• Maintain and enhance identity governance policies, standards, and procedures.
• Provide subject matter expertise on Active Directory (AD), including group policies and access provisioning/deprovisioning.
• Align identity governance practices with frameworks such as PCI DSS, ISO 27001, NIST CSF, and COBIT.
• Engage with IT, HR, and business units to enforce least privilege principles and maintain accurate access records.
• Conduct regular training sessions for the SM team on security controls and client requirements.
• Coordinate SME involvement in quarterly meetings and training initiatives.
• Maintain and organize SharePoint and Jira spaces for audit readiness and evidence management.
• Participate in incident management, change control meetings, and cloud migration initiatives.
• Engage in SOC operations and threat tracking.
• Drive continuous improvement initiatives in identity governance and GRC processes.
• Lead the annual review of security information presentations in collaboration with Compliance.
• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 2 – 4 years of experience in Information Security, with a focus on Identity Governance and Compliance.
• Strong understanding of User Access Review (UAR) processes and tools.
• Experience with Active Directory (AD) and identity lifecycle management.
• Familiarity with regulatory and compliance frameworks: PCI DSS, ISO 27001, NIST, COBIT.
• Excellent analytical, documentation, and communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.
Preferred Qualifications:
• Relevant certifications such as CISSP, CISA, CISM, CRISC, or GIAC.
• Experience with IAM tools (e.g., SailPoint, Saviynt, Okta, Azure AD).
• Prior experience supporting internal or external audits.
• Knowledge of GRC tools and platforms.
• Understanding of legal and regulatory standards such as FERPA, CIS, and data protection laws.
• Knowledge of Cloud Identity (AWS or Azure Identity).
Set alerts for more jobs like Information Security Analyst/ Analyst – Identity Governance and Compliance
Set alerts for new jobs by Yodlee
Set alerts for new Cyber Security jobs in India
Set alerts for new jobs in India
Set alerts for Cyber Security (Remote) jobs
