IT Controls Analyst
Accountabilities:
- Manage user account provisioning, modification, and deactivation across designated IT systems and services, ensuring all access changes are supported by appropriate approvals.
- Assign and maintain user permissions in accordance with Role-Based Access Control (RBAC) standards and established access management procedures.
- Ensure timely removal of system access when employees leave the organization or change roles, verifying that permissions have been fully revoked using automated tools whenever available.
- Participate in quarterly Sarbanes-Oxley (SOX) user access reviews, including extracting access data, organizing and reconciling spreadsheets, and coordinating review activities with representatives across multiple departments.
- Apply the Principle of Least Privilege by ensuring users receive only the access necessary to perform their responsibilities.
- Identify and escalate inappropriate access assignments, excessive permissions, and potential segregation of duties conflicts.
- Create, update, and maintain access control documentation, including standard operating procedures (SOPs), role definitions, and internal policies.
- Develop access management procedures and supporting documentation for newly introduced applications, systems, and technology tools.
- Follow established change management processes when implementing access-related modifications or supporting new system deployments.
- Investigate, troubleshoot, and resolve user access issues and related service tickets within established procedures and service expectations.
- Provide helpdesk support for designated systems and applications, where trained and authorized.
- Collaborate with IT Compliance, technical teams, department leaders, and non-technical employees to coordinate access requests and ensure consistent application of security controls.
- Maintain accurate records of access changes, approvals, reviews, and related activities to support audit readiness and regulatory compliance.
- Perform additional responsibilities as required to support IT operations and internal control objectives.
Requirements
- High school diploma or equivalent.
- At least 1 year of IT services, technical support, or a related professional experience.
- Strong technical aptitude and willingness to develop expertise in IT access management, security controls, and enterprise systems.
- Familiarity with identity and access management concepts, particularly Role-Based Access Control (RBAC).
- Understanding of user account provisioning, permission management, access reviews, and basic information security principles.
- Experience working with ticketing and service management platforms such as Zendesk, ClickUp, or equivalent tools.
- Proficiency in Microsoft 365 applications, particularly Excel, with the ability to organize, analyze, reconcile, and maintain access-related data.
- Strong attention to detail and documentation skills, particularly when managing permissions, reviewing access records, and maintaining compliance documentation.
- Excellent organizational and time management abilities, with the capacity to manage multiple requests and meet established deadlines.
- Strong analytical and problem-solving skills, with the ability to investigate access issues and identify potential control weaknesses.
- Effective written and verbal communication skills, including the ability to collaborate with technical and non-technical stakeholders.
- Ability to follow established policies, procedures, and approval workflows while exercising sound judgment when identifying and escalating potential security concerns.
- Comfortable working in a fast-paced, evolving environment and adapting to new systems, processes, and business requirements.
- Must be able to successfully complete the required employment background investigation, which may include state and federal background checks.
- Remote work eligibility: Candidates must reside and work in one of the currently approved states: Connecticut, Delaware, Florida, Georgia, Maryland, Michigan, North Carolina, New Jersey, New York, Ohio, Pennsylvania, Texas, or West Virginia. Eligibility is subject to change.
How Jobgether works
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1