Role: IAM Audit Analyst Location: Chicago, IL Work Model: Hybrid - Anchor Days: Wednesday is mandatory; contractor selects 2 additional days per week Duration: 04 Months
JD:
The IAM Audit Analyst leads audit engagements (internal/external) focused on Identity and Access Management (IAM), IT controls, and cybersecurity.
This role involves overseeing audit request execution, evaluating evidence, and working closely with 1LOD/2LOD to define scope and develop effective evidence testing documentation.
You will bring technical expertise in risk, controls, and IAM technologies, ensuring strong governance and compliance across access management processes.
Key Responsibilities Lead projects related to:
Identity and Access Management (IAM) controls
IT General Controls (ITGC)
Information security / cybersecurity
Application and system implementation reviews
IT governance and operational processes
Provide oversight and guidance to stakeholders on IAM Audit requests and Evidence Requests
Partner with Implementation owners to:
Define audit scope and objectives
Develop appropriate testing strategies based on risk assessment
Assist in developing evidence testing timelines based on scope and risk
Finalize and review audit planning and scoping documentation
Conduct and review walkthroughs and testing of:
Application controls
Interface controls
IAM processes (provisioning, de-provisioning, access reviews, PAM)
Ensure work meets departmental standards and quality requirements
Analyze and review implementation plans, and follow up on milestones for issues identified by 1LOD, 2LOD, and Audit teams
Work with various stakeholders across business, technology, risk, and control functions tdrive issue resolution, remediation tracking, and governance alignment
Communicate audit status and findings tbusiness stakeholders and leadership
Draft audit findings, reports, and recommendations for:
Status updates
Memos
Final Closure Packages
Identify and evaluate risks, control gaps, and remediation actions
Coordinate with other teams (regional, business unit, specialist teams) to ensure comprehensive coverage of risk areas
Required Skills & Qualifications:
5–10 years of experience in:
IT Audit / Risk / Controls
IAM-focused audits or security controls
Strong knowledge of:
Audit standards, methodologies, and procedures
IT systems, applications, and cybersecurity risks
Identity and Access Management (IAM) principles, including:
Understanding of IT General Controls (ITGC) and compliance frameworks (SOX, ISO, etc.)
Ability to lead and execute:
Walkthroughs
Design and operational effectiveness testing
Strong analytical, documentation, and reporting skills
Excellent communication and stakeholder management skills
Key Competencies
Strong risk and control mindset
Ability to lead audit engagements independently
Attention to detail with a strategic perspective
Flexibility, creative thinking, and sound business judgment
Team-player with ability to thrive in high-pressure environments
Preferred Qualifications: Certifications such as:
CISA, CISSP, CRISC (ISACA, ISC2, or equivalent)
Experience in:
IAM governance and access certification programs
Cloud IAM environments (Azure, AWS, GCP)
Ability to manage:
Multiple projects simultaneously
Tight deadlines with strong prioritization
Applicant Notices & Disclaimers
For information on benefits, equal opportunity employment, and location-specific applicant notices, click here
At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws.This position's pay range is $64.00/hr - $67.50/hr.
