Senior IAM Governance Analyst
Position Summary
MeridianLink is seeking a Senior IAM Governance Analyst to own the operational execution, quality, effectiveness, and continuous improvement of the enterprise Identity and Access Management (IAM) governance program.
The ideal candidate will ensure the right access is being reviewed by the appropriate reviewers at the needed frequency; validate that all in-scope systems, privileged accounts, service accounts, contractors, and high-risk identities are included; and provide assurance that access governance controls are operating effectively across the organization.
This role partners closely with Security, IT, Engineering, HR, and application owners to ensure access governance controls support MeridianLink's SOC 2, PCI DSS, financial audit, customer assurance, and regulatory obligations.
What You'll Do
· Own the enterprise User Access Review (UAR) program from planning and execution through remediation, reporting, and continuous improvement.
· Coordinate periodic access reviews across applications, infrastructure, cloud platforms, and privileged access environments while partnering with business and system owners to ensure access remains appropriate.
· Assess completed reviews for quality and effectiveness, identify excessive access, orphaned accounts, segregation of duties concerns, and other access-related risks, and drive remediation activities to completion.
· Identify gaps in application ownership, certification coverage, entitlement governance, and privileged access oversight.
· Partner with IAM, Security, Engineering, Compliance, and Audit teams to improve governance processes, support audits and assessments, and strengthen MeridianLink's access management controls.
What You Bring
· 5+ years of experience in Identity and Access Management, Information Security, IT Audit, or Governance, Risk & Compliance.
· 3+ years of experience leading User Access Reviews, access certification campaigns, or identity governance programs.
· Strong understanding of identity lifecycle management, role-based access controls, privileged access concepts, entitlement analysis, and access governance best practices.
· Experience supporting compliance and audit initiatives such as SOC, PCI DSS, SOX, ISO 27001, or similar regulatory and control frameworks.
· Strong analytical, communication, and stakeholder management skills with the ability to influence decisions and challenge ineffective review practices.
Estrutura e conduz a governança de Segurança da Informação e FinOps, acompanhando vulnerabilidades, conformidade e custos em nuvem e dando à liderança visibilidade para decisões e ações.
Develop and maintain a central Product Security controls catalog by analyzing and harmonizing requirements across standards and regulations, ensuring traceability, and supporting catalog management and automation.
Own regional information security compliance for the UAE, connecting regulatory requirements with the global programme while managing controls, audits, evidence and external security relationships.
Own key elements of a global GRC programme, leading risk assessments, audit support, control testing, policy governance, and third-party risk oversight to strengthen security assurance and compliance.
Build and run independent monitoring of the global financial crime compliance framework, assess control effectiveness and emerging risks, and drive clear remediation with senior stakeholders.
