Job Description

About the Role

Owns requirements, process design and stakeholder alignment on IGA programs. Translates audit findings, compliance obligations and the way a business grants access into a governed identity model the platform can enforce.

Key Responsibilities

• Run current-state discovery: access request and approval processes, application and entitlement inventory, authoritative source analysis, joiner-mover-leaver process mapping, and identification of governance gaps.
• Elicit and document requirements for identity lifecycle automation, access request and approval flows, certification scope and cadence, SoD policy, and delegated administration models.
• Facilitate role engineering workshops with business and application owners — role mining output validation, role definition and hierarchy, entitlement description cleanup and risk rating.
• Own the application onboarding pipeline: intake questionnaire, connector feasibility assessment with engineering, data and attribute mapping, owner identification, and the onboarding runbook.
• Design certification campaigns end to end: reviewer models, scope and frequency, escalation paths, revocation and closed-loop remediation, and reviewer fatigue mitigation.
• Map program controls to audit and compliance drivers — SOX ITGC access controls, HIPAA, PCI DSS, GDPR, NIST 800-53, ISO 27001 — and produce the evidence artifacts auditors will request.
• Author functional specifications, user stories and acceptance criteria; maintain requirements traceability from control objective through to configured platform behavior.
• Own UAT: test planning, test case authoring, coordination of business testers, defect triage and sign-off readiness.
• Build organizational change management material — reviewer and requester training, communications, job aids — and track adoption.
• Produce program reporting for client steering committees: application onboarding burn-down, campaign completion rates, orphan and dormant account reduction, SoD violation trend, and access request cycle time.

Basic Qualifications

• CBAP, PMI-PBA or ITIL certification; vendor functional certification on a primary IGA platform.
• Hands-on configuration exposure to SailPoint, Saviynt or Okta admin consoles; SQL for entitlement and access-data analysis.
• Role mining or identity data-quality tooling experience.
• Reporting and dashboard build in Power BI or Tableau for program metrics.
• Regulated-industry program experience — financial services, healthcare or public sector.
• Prior work on a legacy IGA migration or a post-audit remediation program.

Preferred Qualifications

• 7–10+ years in business analysis or consulting, including 4+ years on IAM/IGA programs.
• Strong working knowledge of IGA concepts: identity lifecycle, entitlements, roles and RBAC, segregation of duties, access certification, access request and provisioning, orphan and dormant accounts, privileged account governance.
• Requirements engineering discipline — BRD/FRD authoring, user stories and acceptance criteria, process mapping (BPMN or swimlane), traceability matrices.
• Audit and compliance literacy: SOX ITGC user access controls, least privilege, segregation of duties, and how an access review finding becomes a program requirement.
• Exposure to at least one IGA platform from the functional side — SailPoint, Saviynt, or Okta Identity Governance — enough to know what is configurable versus custom.
• Workshop facilitation with business, application, security and audit stakeholders; executive-quality written deliverables.
• Agile delivery experience (Jira or Azure Boards) and ownership of UAT through sign-off.
• Consulting presence — comfortable holding a position with a client stakeholder who does not want to own their entitlements.

Salary Range

$150k - $170k USD

This is a full-time opportunity with Gruve.

‍