Identity Process and Compliance Analyst

Veteran Firm Seeking an Identity Process and Compliance Analyst for a Remote Assignment in Remote, US

My name is Stephen Hrutka. I lead a Veteran-Owned management consulting firm in Washington, DC. We specialize in Technical and Cleared Recruiting for the Department of Defense (DoD), the Intelligence Community (IC), and other advanced defense agencies.

At HRUCKUS, we support fellow Veteran-Owned businesses by helping them recruit for positions across organizations such as the VA, SBA, HHS, DARPA, and other leading-edge R&D-focused defense agencies.

We seek to fill an Identity Process and Compliance Analyst role in Remote, US

The ideal candidate is a Remote resident with 5+ years of experience in IAM governance, cybersecurity compliance, IT audit, and process analysis, along with preferred experience in NERC CIP compliance and critical infrastructure environments.

If you’re interested, I'll gladly provide more details about the role and further discuss your qualifications.

Thanks,

Stephen M Hrutka

Principal Consultant

www.hruckus.com

Executive Summary: HRUCKUS is looking for an experienced Identity Process and Compliance Analyst to evaluate, improve, document, and maintain identity and access management (IAM) processes, policies, and controls.

Position Description: This role focuses on identifying gaps between existing IAM procedures, actual operating practices, regulatory requirements, and industry standards. The analyst will recommend practical improvements, strengthen audit readiness, and help implement sustainable IAM governance processes.

Position Responsibilities:

• Review IAM policies, standards, procedures, runbooks, and approval workflows.
• Evaluate identity lifecycle processes, including onboarding, role changes, and offboarding.
• Assess access requests, approvals, privileged access, emergency access, service accounts, and access reviews.
• Identify gaps between documented controls and actual operating practices.
• Translate compliance requirements and audit observations into actionable process improvements.
• Develop and maintain process maps, control narratives, procedures, runbooks, and work instructions.
• Define process ownership, approval matrices, and evidence requirements.
• Coordinate process reviews with IAM, infrastructure, applications, HR, security, audit, and compliance teams.
• Support audit preparation, evidence collection, control testing, and remediation tracking.
• Develop process metrics, control indicators, and reporting requirements.
• Maintain documentation version control, ownership, and review schedules.
• Support change management, stakeholder communications, training, and process adoption.

Required Qualifications:

• 5+ years of experience in IAM governance, cybersecurity compliance, IT audit, risk management, IT process analysis, or a related discipline.
• Experience reviewing and improving IAM policies, procedures, runbooks, and operating practices.
• Experience evaluating documented procedures and operational practices to identify control gaps.
• Understanding of joiner, mover, and leaver processes, access approvals, access reviews, privileged access, and least privilege.
• Strong process mapping and technical documentation experience.
• Ability to identify control gaps and recommend practical improvements.
• Experience interpreting audit findings, regulatory requirements, and control objectives.
• Understanding of IT general controls, evidence requirements, remediation, and control testing.
• Experience supporting audit readiness and compliance activities.
• Strong experience creating process maps, procedures, control narratives, work instructions, and remediation plans.
• Ability to facilitate discussions across technical and business teams.
• Working knowledge of identity lifecycle management, Joiner/mover/leaver processes, access requests and approvals, privileged access management, access certifications and reviews, segregation of duties, least-privilege principles, and service account governance.
• Experience documenting controls, procedures, evidence requirements, and remediation plans.
• Ability to interpret regulatory and technical requirements.
• Strong stakeholder facilitation and interviewing skills.
• Excellent written and verbal communication skills.
• Ability to work independently in a remote environment.

Desired Qualifications:

• Experience with NERC CIP compliance.
• Electric utility or critical infrastructure industry experience.
• SOX compliance and IT general controls.
• NIST, ISO 27001, or COBIT frameworks.
• Audit preparation, control testing, and evidence collection.
• IAM platforms such as Saviynt, SailPoint, Microsoft Entra ID Governance, CyberArk, and BeyondTrust.
• Organizational change management and process adoption experience.
• Preferred Certifications: CISA, CRISC, CISSP, CISM, ITIL, NERC CIP training, or comparable certifications.

Details:

Job Title: Identity Process and Compliance Analyst

Location: Remote, US (Central Time business hours preferred)

Salary Range: $55 to $70 per hour W-2