Senior IAM Governance Analyst
Description
Senior IAM Governance Analyst
Position Summary
MeridianLink is seeking a Senior IAM Governance Analyst to own the operational execution, quality, effectiveness, and continuous improvement of the enterprise Identity and Access Management (IAM) governance program.
The ideal candidate will ensure the right access is being reviewed by the appropriate reviewers at the needed frequency; validate that all in-scope systems, privileged accounts, service accounts, contractors, and high-risk identities are included; and provide assurance that access governance controls are operating effectively across the organization.
This role partners closely with Security, IT, Engineering, HR, and application owners to ensure access governance controls support MeridianLink's SOC 2, PCI DSS, financial audit, customer assurance, and regulatory obligations.
What You'll Do
Own the enterprise User Access Review (UAR) program from planning and execution through remediation, reporting, and continuous improvement.
Coordinate periodic access reviews across applications, infrastructure, cloud platforms, and privileged access environments while partnering with business and system owners to ensure access remains appropriate.
Assess completed reviews for quality and effectiveness, identify excessive access, orphaned accounts, segregation of duties concerns, and other access-related risks, and drive remediation activities to completion.
· Identify gaps in application ownership, certification coverage, entitlement governance, and privileged access oversight.
· Partner with IAM, Security, Engineering, Compliance, and Audit teams to improve governance processes, support audits and assessments, and strengthen MeridianLink's access management controls.
· Collaborate on cross-functional GRC initiatives and support other GRC projects and priorities as needed.
What You Bring
5+ years of experience in Identity and Access Management, Information Security, IT Audit, or Governance, Risk & Compliance.
3+ years of experience leading User Access Reviews, access certification campaigns, or identity governance programs.
Expert understanding of identity lifecycle management, role-based access controls, privileged access concepts, entitlement analysis, and access governance best practices.
Experience supporting compliance and audit initiatives such as SOC, PCI DSS, SOX, ISO 27001, or similar regulatory and control frameworks.
Strong analytical, communication, and stakeholder management skills with the ability to influence decisions and challenge ineffective review practices.
AI fluency and experience leveraging AI and automation tools to streamline workflows, improve efficiency, and strengthen governance processes.
Qualifications
Experience with SecurEnds, SailPoint, Saviynt, Entra ID Governance, Okta Governance, or similar IGA platforms.
Experience in regulated financial, lending, fintech, or SaaS environments.
Familiarity with Azure, Active Directory, Entra ID, cloud platforms, and enterprise applications.
CISA, CRISC, CISSP, CGEIT, or similar certifications is a plus.
Skills
As published by ashby · 12 questions · 1 written answer
Basics
Name, Email, Resume
Short answers (3)
- Phone Number
- Location
- If Referral please add name below. optional
Pick from a list (8)
- Are you eighteen years of age or older?
- May MeridianLink contact your CURRENT or MOST RECENT employer?
- May MeridianLink Contact your PAST employers?
- Have you ever been fired or asked to resign to avoid being fired from a job?
- Can you perform the essential functions of this job with or without reasonable accomodation?
- Will you now or in the future require sponsorship (i.e. H-1B visa ect.) to legally work in the United States?
- I understand that as permitted by law, MeridianLink will conduct an investigative consumer report. I understand the scope of this consumer report may include verification of my references, employment history, credit and indebtedness, criminal conviction history, educational and training background and other matters related to my suitability for employment. Upon timely written request to the personnel department of MeridianLink, the nature and scope of the report will be disclosed to me. If I am offered employment with MeridianLink, I understand that the offer will be conditioned on passing a pre-employment drug screen, timely submitting valid documentation that confirms my identity and authorization to work in the United States, and reading and agreeing to comply with the MeridianLink policies as stated in its Employee Handbook. I certify that the answers given by me in this employment application are true, correct and complete. I agree that the company shall not be liable, in any respect, if my employment is terminated because of misstatements or pertinent omissions made by me in this application. Moreover, I understand that all offers of employment are contingent upon passing the company's prescribed credit check and background screen. A copy of this form may be used as the original. The use of results from this form and/or tests will be used for prudent employment decisions. It is agreed and understood that completion of this application does not mean a job opening exists and in no way obligates the company to employ me. In the event of employment, I will comply with all company rules and regulations as established from time to time. I am willing to work all assigned overtime or other special work assignments as requested by the company. I also understand that MeridianLink, Inc. retains the right to amend, modify, add or delete any or all policies or procedures at its sole and absolute discretion. I understand that nothing contained herein is intended to create a contract between the company and me for either employment or the provision of any compensation or benefits. I hereby understand and acknowledge that any employment relationship with this Company is of an “At-Will” nature, which means that the Employee may resign at any time and the Employer may discharge Employee at any time, with or without notice, with or without cause. It is further understood that this ‘At-Will’ employment relationship may not be changed by any written document or by verbal agreement unless such change is specifically acknowledged in writing by an authorized Executive of this Company. During my employment with MeridianLink, Inc. and after my employment ends, I agree not to disclose any confidential or proprietary information regarding operating and trade secrets. CERTIFICATE OF APPLICANT: I certify that all statements made in this application and attachments are true, and I agree and understand that misstatements or omissions of any material fact may be cause for disqualification or dismissal from employment with MeridianLink
- Please let us know where you heard about this job opening?
Written answers (1)
- If above question is "Other" please add the source below. optional