IAM GRC Lead

Nelnet

. Serve as the IAM team’s primary liaison and audit lead for internal audit, external auditors, compliance, and third-party risk teams during SOC 1 and SOC 2 examinations .

Posted 11/4/2026full-timeUnited StatesSenior💰 $80,000 - $110,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading IAM audits, managing compliance with SOC 1 and SOC 2 standards, and effectively communicating technical controls to diverse audiences. Proficient in organizing audit processes, maintaining documentation, and collaborating with engineers to enhance evidence collection.

Highest-signal resume keywords

IAM Audit Lifecycle ManagementSOC 1/SOC 2 ComplianceIdentity And Access ManagementSecurity Questionnaire CompletionMicrosoft 365 Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT AuditIT ComplianceGRCSecurity OperationsMulti-Factor AuthenticationSingle Sign-OnUser Access ReviewsProvisioning And DeprovisioningRole-Based AccessAudit Findings Management

Soft Skills

Strong Written CommunicationHighly OrganizedInfluencing Without Authority

Tools & Technologies

Microsoft ExcelMicrosoft SharePointMicrosoft Teams

Certifications & Qualifications

Security Clearance

Industry Keywords

SOC 1SOC 2NISTFFIECGLBADepartment Of Education RequirementsAudit Readiness ReviewsControl Self-TestingEvidence ArtifactsDue-Diligence Requests

About the role

Key responsibilities & impact

Serve as the IAM team’s primary liaison and audit lead for internal audit, external auditors, compliance, and third-party risk teams during SOC 1 and SOC 2 examinations
Lead the full IAM audit lifecycle, including planning, kickoff, fieldwork, findings, and close
Negotiate audit scope, sample sizes, and timelines; challenge inaccurate or out-of-scope findings
Run pre-audit readiness reviews and periodic control self-testing
Receive, triage, and track identity-related audit and information requests
Respond to U.S. Department of Education requirements and reviews related to identity systems, authentication, and access controls
Complete security questionnaires and due-diligence requests from banks and financial institutions
Gather, verify, and deliver evidence from IAM systems and engineers
Schedule and prepare subject matter experts for auditor walkthroughs and interviews
Build and maintain a centralized, version-controlled repository of IAM policies, procedures, control narratives, system diagrams, and evidence artifacts
Map IAM controls to SOC 1/SOC 2 Trust Services Criteria, Department of Education requirements, NIST, FFIEC, GLBA, and customer contractual obligations
Maintain an audit calendar and track findings, exceptions, remediation items, deadlines, and evidence windows through closure
Develop standardized response libraries, templates, playbooks, and reusable evidence packages
Partner with IAM engineers to automate recurring evidence collection
Establish review and approval workflows for responses
Measure response times and effort and continuously improve processes to reduce audit burden
Review and refresh the response library annually or when systems, policies, or controls change
Report remediation and audit status to leadership

Requirements

What you’ll need

2+ years of experience in IT audit, IT compliance, GRC, or security operations, with direct involvement in SOC 1 and/or SOC 2 audits
Ability to lead audit engagements and influence engineers, auditors, and partners without direct authority
Working knowledge of identity and access management concepts, including provisioning and deprovisioning, role-based access, privileged access, multi-factor authentication, single sign-on, and user access reviews
Experience completing security questionnaires or vendor due-diligence requests
Strong written communication skills and ability to explain technical controls clearly to auditors and non-technical audiences
Highly organized, with experience managing multiple requests and deadlines
Proficiency with Microsoft 365, including Excel, SharePoint, and Teams, or similar collaboration tools
Must already be authorized to work in the United States without current or future visa sponsorship
Security clearance is required

Benefits

Comp & perks

Medical, dental, and vision insurance
HSA and FSA
Generous earned time off
401(k)
Student loan repayment
Life insurance and AD&D insurance
Employee assistance program
Employee stock purchase program
Tuition reimbursement
Performance-based incentive pay
Short- and long-term disability
Robust wellness program
Hybrid work option with remote work for part of the week for associates within 30 miles of an office