IAM Governance Analyst
Department
Identity and Access Management Governance
Role Summary
The Cybersecurity Control Assurance and Governance Analyst supports the design, oversight, and effectiveness of the bank’s Identity and Access Management governance framework. This role blends IAM domain expertise with strong data analytics capabilities to evaluate control effectiveness, enhance risk visibility, and ensure alignment with regulatory requirements and internal standards. The role focuses on governance execution, control assurance, and translating complex cybersecurity data into meaningful insights for business and risk stakeholders.
Key Responsibilities
IAM Governance
• Support the development and maintenance of IAM minimum requirements, standards, procedures, and guidelines
• Ensure IAM governance practices align with business objectives, risk appetite, and regulatory expectations
• Participate in policy exception management and control waiver processes
• Partner with business lines, risk management, compliance, and internal audit to drive consistent and effective governance
• Maintain IAM risk and control libraries within GRC platforms such as Archer
Data Analytics and Reporting
• Ingest, analyze, and interpret large volumes of cybersecurity and IT risk data from multiple sources such as GRC tools, Sphere, and audit logs
• Transform raw data through ETL processes into actionable insights, dashboards, and scorecards for business and risk stakeholders
• Develop and maintain control effectiveness metrics, key risk indicators, and operational risk reporting
• Identify trends, anomalies, and risk signals using data visualization and analytics tools such as Tableau
• Partner with data engineering teams to ensure accuracy, quality, and availability of security related datasets
Control Assurance
• Conduct risk based assessments and control testing for identity and access management processes across the enterprise
• Validate both design and operating effectiveness of technical and administrative security controls
• Develop control testing procedures aligned to NIST and internal control methodologies
• Track control deficiencies, remediation activities, and outcomes
• Communicate control assurance results and risk posture to senior management and key stakeholders
Audit and Regulatory Support
• Act as a liaison for internal audits, external audits, regulatory examinations, and third party assessments
• Coordinate audit responses, evidence collection, and issue tracking
• Support ongoing regulatory and risk management inquiries related to IAM controls
Qualifications
Education
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field
Certifications Preferred
• CISA
• CISSP
• CRISC
• CISM
Experience
• Three to seven years of experience in cybersecurity, IT risk management, internal audit, or compliance
• Demonstrated experience analyzing and contextualizing cybersecurity and IT risk data
• Strong understanding of cybersecurity frameworks and regulatory requirements
• Hands on experience with control testing, audits, and GRC platforms
Skills and Competencies
• Strong analytical, documentation, and written communication skills
• Ability to translate technical cybersecurity risks into clear business language
• Working knowledge of IT architecture, systems, cloud platforms, and their security implications
• Ability to manage multiple priorities in a fast paced environment with minimal supervision
Preferred Tools and Technologies
• GRC platforms such as Archer or ServiceNow GRC
• Risk and control frameworks including NIST
• Cloud and SaaS platforms such as AWS and Azure
Pay Transparency
The salary range for this position is $65,000-80,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual pay is based on multiple factors, including but not limited to work location, relevant skills, and experience.
We offer competitive pay and a comprehensive benefits package, including medical, dental, and vision coverage, retirement benefits, maternity and paternity leave, flexible work arrangements, education reimbursement, wellness programs, and more. Citizens’ paid time off policy exceeds the mandatory paid sick or paid time away requirements of local and state jurisdictions within the United States.
For an overview of benefits, please visit
https://jobs.citizensbank.com/benefits
#LI-Citizens1
Equal Employment Opportunity
Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.
Equal Employment and Opportunity Employer
Job Applicant Data Privacy Policy
Background Check
Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.
Top Skills
Similar Jobs
What you need to know about the Colorado Tech Scene
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
