FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.

Senior Information Security Analyst
Ameriprise Financial Services, LLC. Analyze identity and access data to determine whether access remains appropriate, approved, timely and aligned to least privilege .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in identity and access governance, including access reviews, risk assessment, and remediation strategies. Proficient in utilizing Identity Governance and Administration platforms and analyzing control data to ensure compliance with regulatory standards.
Highest-signal resume keywords
Identity Governance And AdministrationAccess Reviews And AttestationsSQL, PowerShell, Python, Power BIPrivileged-Access GovernanceCISSP, CISM, CISA, CRISC, GIAC
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Access Risk RemediationControl Data AnalysisPolicy EnforcementRole-Based Access Control (RBAC)Joiner, Mover, Leaver (JML) ControlsSegregation Of Duties (SoD)Audit ResponseCloud Security GovernanceIncident ManagementUser Acceptance Testing
Soft Skills
Effective CommunicationAttention To DetailFollow-ThroughStakeholder ManagementAbility To Manage Competing Priorities
Tools & Technologies
RSA Governance & LifecycleSailPointSaviyntEntra ID GovernanceIBM Security Verify GovernanceActive DirectoryLDAPWindowsLinuxDatabases
Certifications & Qualifications
CISSPCISMCISACRISCGIAC
Industry Keywords
Financial ServicesRegulated EnvironmentSOXSOCNYDFSFINRASECGLBA
Tech Stack
Tools & technologiesCloudLinuxPythonSQL
About the role
Key responsibilities & impact- Analyze identity and access data to determine whether access remains appropriate, approved, timely and aligned to least privilege
- Identify control gaps, policy violations, unusual patterns and incomplete outcomes; assess risk and recommend proportionate action
- Coordinate governance activities across application owners, business reviewers, IAM delivery teams, infrastructure teams, audit, risk and other control partners
- Drive issues through remediation and validate closure using reliable evidence
- Prepare metrics, risk summaries, audit evidence and leadership reporting on control health, exceptions, ageing and remediation progress
- Contribute to policies, standards, procedures, control design and continuous improvement
- Govern and facilitate periodic user, privileged and application access reviews and certifications
- Govern identity lifecycle controls, including joiner, mover and leaver controls, transfer reviews and termination controls
- Govern service-account reviews, orphan-account remediation, inactivity reviews, segregation-of-duties monitoring and role-based access controls
- Assess review scope, reviewer appropriateness, decision quality, conflicting decisions, overdue reviews and remediation status
- Escalate material risks and recurring non-compliance; verify access removals and ownership changes
- Maintain accurate, sufficient and retrievable evidence for internal and external audit
- Evaluate adherence to identity, authentication, privileged-access, credential-management and least-privilege requirements
- Investigate policy exceptions and non-compliant configurations; coordinate risk assessment, approval, remediation or formal exception handling
- Review identity and access implications for new services, cloud IAM entities, privileged accounts and changing technology patterns
- Partner with technical teams to translate policy intent into practical security requirements and guardrails
- Review privileged actions that cannot be linked to an approved business event or change record
- Assess business justification, identify potentially inappropriate activity and escalate unresolved or high-risk cases
- Monitor event data, alert logic, evidence quality and governance workflows supporting privileged-action monitoring
- Prepare investigative and compliance reporting for leadership, audit and risk stakeholders
Requirements
What you’ll need- Bachelor's degree in a technical discipline or equivalent relevant work experience
- Demonstrated experience in one or more governance areas: access reviews and attestations, JML controls, RBAC, SoD, policy enforcement, privileged-access governance, audit response or access-risk remediation
- Hands-on familiarity with at least one Identity Governance and Administration platform, such as RSA Governance & Lifecycle (Aveksa), SailPoint, Saviynt, Entra ID Governance, IBM Security Verify Governance or a comparable platform
- 4–7 years of total professional experience, with at least 50% of that experience in identity and access governance
- Experience analyzing access or control data and translating findings into risk, remediation, reporting or stakeholder action
- Ability to create and modify SQL, PowerShell, Python, Power BI, spreadsheets or similar tools
- Effective written and verbal communication, attention to detail, follow-through and ability to manage competing priorities
- Ability to work with stakeholders across onshore and offshore models and operate in a regulated or control-focused environment
- Preferred: experience in financial services or another highly regulated environment
- Preferred: experience preparing identity and access control evidence or responding to SOX, SOC, NYDFS, FINRA, SEC, GLBA or comparable compliance assessments
- Preferred: working knowledge of Active Directory / LDAP, authentication and authorization models, Windows or Linux, databases, cloud security governance, AI security governance and privileged credentials
- Preferred: experience with incident/problem/change/request management, business analysis, process flows, User Acceptance Testing and project coordination
- Preferred: relevant security certifications such as CISSP, CISM, CISA, CRISC or GIAC
Benefits
Comp & perks- Hybrid work arrangement: employees work in the office at least three days per week, with flexibility to work from home two days per week
- Inclusive, collaborative culture
- Opportunities for professional growth and career development
- Reasonable accommodation support during recruitment and interviews
- Equal opportunity employment