Infrastructure Engineering Advisor HIH – Evernorth

Information Protection Advisor

Identity & Access Management (IAM)

Focus Area: User Access Review Lifecycle, Identity Governance, Entitlement Management & Compliance

The Information Protection Advisor plays a key operational and analytical role within the Identity Governance organization, supporting enterprise-wide Identity & Access Management (IAM) controls. This position focuses heavily on the execution, validation, and continuous improvement of the User Access Review (UAR) Lifecycle, Entitlement Management, and Compliance‑driven IAM processes.

The Advisor ensures all access governance activities are performed with precision, delivering audit‑ready evidence, enforcing least privilege, and reducing enterprise access risk across complex application environments.

.

1. 1. User Access Review Lifecycle Execution

• Execute Identity Access Reviews across all in-scope applications.
• Validate review inputs and outputs for completeness and accuracy.
• Support manager certifications, follow-ups, and timely review completion.
• Analyze access anomalies and collaborate with application teams to resolve discrepancies.
• Consolidate and prepare evidence packages for audit reviews. 

2. Entitlement Management & Evidence Validation

• Conduct entitlement list validation by gathering accurate entitlement evidence from application owners.
• Maintain updated entitlement inventories and documentation supporting quarterly and semi‑annual IAM reviews.
• Assist in identifying missing, outdated, or incomplete entitlement data.

3. Compliance, Audit, & Control Support

• Ensure UAR and entitlement controls meet SOX, SOC1/SOC2, HIPAA, and internal compliance requirements.
• Prepare audit‑ready documentation for internal and external auditors.
• Identify control gaps and support development of remediation plans.
• Support zero‑finding compliance posture by ensuring disciplined, consistent execution of IAM controls.

4. IAM Tools & Data Analysis

• Use IAM platforms (e.g., Saviynt) to execute scheduled reviews, analyze access data, and validate entitlement structures. 
• Leverage tools such as Excel and SQL for data validation, reconciliation, and reporting. 

5. Stakeholder & Cross‑Team Collaboration

• Work directly with application teams, tool engineering teams, compliance partners, and business stakeholders.
• Clearly articulate access review findings and recommend corrective actions.
• Maintain professional communication with managers during review cycles to promote timely completion and governance awareness.

Education:

• Bachelor’s degree and equivalent experience required

Experience:

• 11-13 years of experience
• 3–5+ years of experience in Identity & Access Management or related information security disciplines.

Required Skills:

• Advanced Microsoft Excel experience is required, including:
  • Complex formulas (LOOKUPs, INDEX/MATCH, nested logic functions)
  • Pivot tables & pivot charts
  • Advanced data cleansing and transformation
  • Conditional formatting and data validation
  • Working with large datasets (100k+ rows) efficiently
• Hands-on experience with IAM/IGA tools such as Saviynt.
• Strong understanding of entitlements and least‑privilege principles.
• Familiarity with regulatory and audit frameworks (SOX, SOC1/SOC2, HIPAA, GDPR).
• Strong analytical skills with the ability to interpret and communicate technical data to non‑technical stakeholders.

Preferred Qualifications

• Experience with SQL for data queries and analysis.
• Exposure to Privileged Access Management (PAM) concepts.
• Experience supporting large-scale or global IAM review cycles.

Success Measures

• Consistent, high‑quality execution of User Access Reviews with accurate, complete inputs and outputs.
• High on‑time completion rate for all review cycles.
• Clear reduction in access errors, entitlement discrepancies, and manual reviews.
• Strong audit readiness reflected in control quality, evidence completeness, and stakeholder satisfaction.
• Maintain a 99.999% audit success rate with zero findings on internal and external compliance reports.

Equal Opportunity Statement

Evernorth is an Equal Opportunity Employer actively encouraging and supporting organization-wide involvement of staff in diversity, equity, and inclusion efforts to educate, inform and advance both internal practices and external work with diverse client populations.

About Evernorth Health Services