Operate and administer the enterprise IGA platform integrated with cloud and SaaS systems.
Execute and monitor joiner, mover, leaver processes with emphasis on audit traceability.
Support automated provisioning and deprovisioning across Azure/Entra ID, AWS, GCP, and SaaS platforms.
Maintain role-based and attribute-based access models for SOX in-scope applications.
Conduct periodic access certifications for workforce, privileged, and service accounts.
Validate identity and entitlement data accuracy across authoritative sources.
Execute defined SoD rulesets for financial, ERP, and cloud administrative roles.
Identify, analyze, and document SoD conflicts and violations.
Track mitigations, compensating controls, and approved exceptions.
Support proactive SoD reviews during role design, access requests, and onboarding.
Partner with application owners to remediate recurring SoD issues.
Execute IAM controls mapped to SOX IT General Controls (ITGCs).
Produce audit-ready evidence for internal and external audits.
Support audit walkthroughs, testing, and remediation activities.
Maintain control narratives, procedures, and supporting documentation.
Assist in annual SOX scoping and system coverage validation.
Support governance of cloud administrative roles and high-risk entitlements.
Validate alignment between IGA certifications and cloud IAM configurations.
Assist with governance of non-human identities where in SOX scope.
Monitor access changes affecting cloud-hosted financial systems.

Bachelor’s degree or equivalent experience in Information Security, IT, or related field.
5+ years of experience in IAM, Identity Governance, or ITGC execution.
Hands-on experience with IGA platforms and access certifications.
Strong understanding of SOX ITGC requirements related to user access and SoD.
Experience supporting external audits and producing defensible evidence.
Familiarity with cloud-based identity platforms and SaaS access models.
Experience with ERP and financial systems (SAP, Oracle, Workday, NetSuite).
IAM or security certifications (CISSP, CISM, CRISC, SailPoint, Saviynt).
Exposure to privileged access governance in cloud environments.
Understanding of zero trust and modern identity security principles.

medical/prescription drug coverage (with a Health Savings Account feature)
dental and vision options
employee and spouse/child life insurance
short and long-term disability protection
401(k) with PNC match
pension and stock purchase plans
dependent care reimbursement account
back-up child/elder care
adoption, surrogacy, and doula reimbursement
educational assistance, including select programs fully paid
a robust wellness program with financial incentives
maternity and/or parental leave
up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
between 15 to 25 vacation days each year, depending on career level; and years of service

Security Expert – SOX, Cloud

Key skills