Infrastructure Engineering Senior Analyst - HIH - Evernorth

Information Protection Senior Analyst

Identity & Access Management (IAM)

Focus Area: User Access Review Lifecycle, Identity Governance, Entitlement Management & Compliance

The Information Protection Senior Analyst supports Identity Governance operations by executing and validating Identity & Access Management (IAM) controls across the enterprise. This role is heavily involved in the User Access Review (UAR) Lifecycle, Entitlement Management, and audit‑driven access governance processes. The analyst ensures precise, consistent execution of IAM controls that support least‑privilege enforcement and meet SOX, SOC1/SOC2, HIPAA, and internal audit expectations.

1. Execute User Access Review Lifecycle

• Perform end‑to‑end Identity Access Reviews across in‑scope applications.
• Validate review inputs and outputs to ensure accuracy, completeness, and alignment with least‑privilege principles.
• Support manager certification processes, including follow‑ups and timely review completion.
• Analyze user access anomalies and collaborate with application teams to drive remediation.
• Consolidate and deliver audit‑ready evidence to internal or external auditors. 

2. Entitlement Management & Evidence Validation

• Conduct entitlement list validation by collecting and confirming accurate entitlement evidence from application owners.
• Maintain entitlement inventories supporting quarterly and semi‑annual access review cycles.

3. Compliance & Control Operations

• Ensure IAM controls meet SOX, SOC1/SOC2, HIPAA, and internal audit requirements.
• Create, review, and maintain audit documentation supporting UAR and entitlement controls.
• Identify control gaps and partner with IAM leadership to develop remediation plans.
• Support zero‑finding compliance posture through strict adherence to standardized review practices.

4. IAM Tooling & Data Analysis

• Use IAM platforms (e.g., Saviynt) to execute access reviews, analyze access data, and validate entitlements.
• Leverage Excel for data quality checks, pivoting, reconciliation, and analysis of large datasets.
• (If applicable) Use basic SQL or other analysis tools to support completeness and accuracy of review data.
   

5. Cross‑Team Collaboration

• Work with application teams, IAM engineering, compliance partners, and business stakeholders to resolve access issues and align control execution.
• Communicate review outcomes, deficiencies, and required corrective actions in clear, professional language.
• Support process improvements and operational enhancements within IAM governance workflows.

Education:

• Bachelor’s degree and equivalent experience required

Experience:

• 3-5 years of experience
  • 1–3+ years of experience in Identity & Access Management, Information Security, or related technical fields.

Required Skills:

• Advanced Microsoft Excel skills, including pivot tables, complex formulas, large‑dataset handling, and data validation.
• Strong understanding of IAM concepts: entitlements, least‑privilege, certification workflows.
• Ability to interpret technical access data and communicate it to non‑technical audiences.
• Familiarity with compliance frameworks (SOX, SOC1/SOC2, HIPAA) and audit expectations.
• Experience with IAM tools such as Saviynt (preferred).

Preferred Qualifications

• Exposure to SQL for data validation or reporting. 
• Prior experience in Privileged Access Management (PAM) or application access onboarding.

Success Measures

• Accurate, high‑quality execution of each review cycle with minimal data defects.
• On‑time completion of all UAR and entitlement review tasks.
• High standard of audit readiness, demonstrated by complete, well‑organized evidence packages.
• Maintain a 99.999% audit success rate with zero compliance findings, supporting enterprise audit objectives.
• Positive feedback from IAM leaders, auditors, and application partners on review accuracy and responsiveness.

Equal Opportunity Statement

Evernorth is an Equal Opportunity Employer actively encouraging and supporting organization-wide involvement of staff in diversity, equity, and inclusion efforts to educate, inform and advance both internal practices and external work with diverse client populations.

About Evernorth Health Services