This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT Controls Analyst based in the United States.
As an IT Controls Analyst, you will play a key role in maintaining the security, integrity, and compliance of enterprise IT systems through effective user access management. You will oversee access provisioning, permissions, and account lifecycle processes, ensuring that employees have the appropriate system access based on their roles and responsibilities. Working closely with IT teams, compliance specialists, and department leaders, you will help maintain robust access control procedures and support internal governance requirements. You will also contribute to quarterly Sarbanes-Oxley (SOX) access reviews, documentation improvements, and the implementation of controls for newly introduced systems. This position combines technical support, operational coordination, and compliance-focused responsibilities within a growing, fast-paced organization. It offers an opportunity to strengthen information security practices while developing your expertise in IT governance and access management.
Accountabilities:
- Manage user account provisioning, modification, and deactivation across designated IT systems and services, ensuring all access changes are supported by appropriate approvals.
- Assign and maintain user permissions in accordance with Role-Based Access Control (RBAC) standards and established access management procedures.
- Ensure timely removal of system access when employees leave the organization or change roles, verifying that permissions have been fully revoked using automated tools whenever available.
- Participate in quarterly Sarbanes-Oxley (SOX) user access reviews, including extracting access data, organizing and reconciling spreadsheets, and coordinating review activities with representatives across multiple departments.
- Apply the Principle of Least Privilege by ensuring users receive only the access necessary to perform their responsibilities.
- Identify and escalate inappropriate access assignments, excessive permissions, and potential segregation of duties conflicts.
- Create, update, and maintain access control documentation, including standard operating procedures (SOPs), role definitions, and internal policies.
- Develop access management procedures and supporting documentation for newly introduced applications, systems, and technology tools.
- Follow established change management processes when implementing access-related modifications or supporting new system deployments.
- Investigate, troubleshoot, and resolve user access issues and related service tickets within established procedures and service expectations.
- Provide helpdesk support for designated systems and applications, where trained and authorized.
- Collaborate with IT Compliance, technical teams, department leaders, and non-technical employees to coordinate access requests and ensure consistent application of security controls.
- Maintain accurate records of access changes, approvals, reviews, and related activities to support audit readiness and regulatory compliance.
- Perform additional responsibilities as required to support IT operations and internal control objectives.
Requirements:
- High school diploma or equivalent.
- At least 1 year of IT services, technical support, or a related professional experience.
- Strong technical aptitude and willingness to develop expertise in IT access management, security controls, and enterprise systems.
- Familiarity with identity and access management concepts, particularly Role-Based Access Control (RBAC).
- Understanding of user account provisioning, permission management, access reviews, and basic information security principles.
- Experience working with ticketing and service management platforms such as Zendesk, ClickUp, or equivalent tools.
- Proficiency in Microsoft 365 applications, particularly Excel, with the ability to organize, analyze, reconcile, and maintain access-related data.
- Strong attention to detail and documentation skills, particularly when managing permissions, reviewing access records, and maintaining compliance documentation.
- Excellent organizational and time management abilities, with the capacity to manage multiple requests and meet established deadlines.
- Strong analytical and problem-solving skills, with the ability to investigate access issues and identify potential control weaknesses.
- Effective written and verbal communication skills, including the ability to collaborate with technical and non-technical stakeholders.
- Ability to follow established policies, procedures, and approval workflows while exercising sound judgment when identifying and escalating potential security concerns.
- Comfortable working in a fast-paced, evolving environment and adapting to new systems, processes, and business requirements.
- Must be able to successfully complete the required employment background investigation, which may include state and federal background checks.
- Remote work eligibility: Candidates must reside and work in one of the currently approved states: Connecticut, Delaware, Florida, Georgia, Maryland, Michigan, North Carolina, New Jersey, New York, Ohio, Pennsylvania, Texas, or West Virginia. Eligibility is subject to change.
Benefits:
- Competitive annual salary: $59,000–$72,000, depending on qualifications and experience.
- Comprehensive medical, dental, and vision insurance for eligible employees.
- 401(k) retirement savings plan to support long-term financial planning.
- Paid time off (PTO) and company holidays.
- Employee discounts and additional team member perks.
- Well-being resources and support programs.
- Learning and professional development opportunities.
- Opportunities for career advancement within a growing organization.
- Remote working arrangement, subject to approved state residency requirements.
- Collaborative and dynamic work environment focused on professional growth and operational excellence.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
