What are the responsibilities and job description for the SOX Access Governance / IAM Compliance Lead position at Galaxy i Technologies, Inc.?
SOX Access Governance / IAM Compliance Lead
Contract
Palm Beach Garden, FL
Job Description:
Role Summary
Lead and manage SOX user access recertification programs to ensure compliance with SOX ITrequirements, timely completion of access reviews, remediation of inappropriate access, and audit readiness.
• Bachelor’s degree in information technology, Cyber Security, Compliance, Business Administration, or a related field.
• 8 years of experience in IAM, Cyber Security, or Compliance, including 3 years managing SOX access recertification or access governance programs.
Mandatory Compliance and Access Governance Skills
• Strong knowledge of SOX compliance, IT General Controls, User Access Reviews, access certification, and Segregation of Duties analysis.
• Experience managing quarterly, bi-annual, and annual access certification campaigns and related remediation.
• Strong audit, compliance, documentation, and stakeholder management skills.
Identity Platforms and Reporting Tools
• Hands-on experience with SailPoint or Saviynt, CyberArk, SAP GRC, Active Directory, Microsoft Entra ID, RSA, VPN, and enterprise applications.
• Advanced Microsoft Excel proficiency is mandatory, including PivotTables, VLOOKUP/XLOOKUP, data analysis, reporting, dashboards, and large-volume data reconciliation.
• Ability to prepare compliance dashboards, management reports, audit evidence, and executive-ready documentation.
Functional Skills
• Strong stakeholder management across Finance, IT, Cybersecurity, Internal Audit, External Audit, business process owners, and executive leadership.
• Ability to translate audit and control requirements into clear actions, owners, due dates, acceptance criteria, and measurable outcomes.
• Excellent facilitation, negotiation, escalation, analytical, problem-solving, documentation, and communication skills.
Roles & Responsibilities
SOX Access Recertification Delivery
• Manage quarterly, bi-annual, and annual user access certification campaigns from planning through closure.
• Coordinate with application owners, business stakeholders, Internal Audit, External Audit, IAM, security, and compliance teams.
• Review and certify user, privileged, and role-based access across Active Directory, SAP, CyberArk, RSA, VPN, Microsoft Entra ID, and enterprise applications.
• Perform or coordinate Segregation of Duties analysis and validate review populations, reviewer assignments, and campaign completeness.
Remediation, Evidence, and Reporting
• Track inappropriate access, remediation actions, exceptions, compensating controls, ageing, and closure evidence.
• Maintain complete, accurate, traceable, and audit-ready documentation for access review decisions and remediation.
• Prepare compliance dashboards, management reports, status summaries, and audit documentation.
• Escalate overdue reviews, unresolved exceptions, and access risks to the appropriate stakeholders.
Process Improvement
• Drive process automation, standardized campaign controls, data-quality improvements, and continuous improvement initiatives.
• Use advanced Excel analysis and reconciliation to validate large access datasets and identify anomalies.
Generic Managerial Skills, If any
• Demonstrated leadership of cross-functional teams in deadline-driven audit and compliance environments.
• Strong executive presence and ability to communicate complex control risks clearly to technical and non-technical audiences.
• Excellent organization, prioritization, facilitation, negotiation, conflict resolution, and decision-making skills.
• Ability to manage multiple workstreams, competing priorities, tight deadlines, and geographically distributed stakeholders.
• Detail-oriented, accountable, collaborative, and focused on quality, transparency, and measurable outcomes.
• PMP, CISA, CIA, CPA, CRISC, or relevant compliance certification preferred.
Key Words to search in Resume
SOX, IT User Access Review, UAR, Access Recertification, Access Certification, Access Governance, IAM, Segregation of Duties, SoD Analysis, SailPoint, Saviynt, CyberArk, SAP GRC, Active Directory, Microsoft Entra ID, RSA, VPN, Access Remediation, Audit Evidence, Compliance Dashboard, Advanced Excel, PivotTables, VLOOKUP, XLOOKUP, Data Reconciliation
Lead and manage SOX user access recertification programs to ensure compliance with SOX ITrequirements, timely completion of access reviews, remediation of inappropriate access, and audit readiness.
• Bachelor’s degree in information technology, Cyber Security, Compliance, Business Administration, or a related field.
• 8 years of experience in IAM, Cyber Security, or Compliance, including 3 years managing SOX access recertification or access governance programs.
Mandatory Compliance and Access Governance Skills
• Strong knowledge of SOX compliance, IT General Controls, User Access Reviews, access certification, and Segregation of Duties analysis.
• Experience managing quarterly, bi-annual, and annual access certification campaigns and related remediation.
• Strong audit, compliance, documentation, and stakeholder management skills.
Identity Platforms and Reporting Tools
• Hands-on experience with SailPoint or Saviynt, CyberArk, SAP GRC, Active Directory, Microsoft Entra ID, RSA, VPN, and enterprise applications.
• Advanced Microsoft Excel proficiency is mandatory, including PivotTables, VLOOKUP/XLOOKUP, data analysis, reporting, dashboards, and large-volume data reconciliation.
• Ability to prepare compliance dashboards, management reports, audit evidence, and executive-ready documentation.
Functional Skills
• Strong stakeholder management across Finance, IT, Cybersecurity, Internal Audit, External Audit, business process owners, and executive leadership.
• Ability to translate audit and control requirements into clear actions, owners, due dates, acceptance criteria, and measurable outcomes.
• Excellent facilitation, negotiation, escalation, analytical, problem-solving, documentation, and communication skills.
Roles & Responsibilities
SOX Access Recertification Delivery
• Manage quarterly, bi-annual, and annual user access certification campaigns from planning through closure.
• Coordinate with application owners, business stakeholders, Internal Audit, External Audit, IAM, security, and compliance teams.
• Review and certify user, privileged, and role-based access across Active Directory, SAP, CyberArk, RSA, VPN, Microsoft Entra ID, and enterprise applications.
• Perform or coordinate Segregation of Duties analysis and validate review populations, reviewer assignments, and campaign completeness.
Remediation, Evidence, and Reporting
• Track inappropriate access, remediation actions, exceptions, compensating controls, ageing, and closure evidence.
• Maintain complete, accurate, traceable, and audit-ready documentation for access review decisions and remediation.
• Prepare compliance dashboards, management reports, status summaries, and audit documentation.
• Escalate overdue reviews, unresolved exceptions, and access risks to the appropriate stakeholders.
Process Improvement
• Drive process automation, standardized campaign controls, data-quality improvements, and continuous improvement initiatives.
• Use advanced Excel analysis and reconciliation to validate large access datasets and identify anomalies.
Generic Managerial Skills, If any
• Demonstrated leadership of cross-functional teams in deadline-driven audit and compliance environments.
• Strong executive presence and ability to communicate complex control risks clearly to technical and non-technical audiences.
• Excellent organization, prioritization, facilitation, negotiation, conflict resolution, and decision-making skills.
• Ability to manage multiple workstreams, competing priorities, tight deadlines, and geographically distributed stakeholders.
• Detail-oriented, accountable, collaborative, and focused on quality, transparency, and measurable outcomes.
• PMP, CISA, CIA, CPA, CRISC, or relevant compliance certification preferred.
Key Words to search in Resume
SOX, IT User Access Review, UAR, Access Recertification, Access Certification, Access Governance, IAM, Segregation of Duties, SoD Analysis, SailPoint, Saviynt, CyberArk, SAP GRC, Active Directory, Microsoft Entra ID, RSA, VPN, Access Remediation, Audit Evidence, Compliance Dashboard, Advanced Excel, PivotTables, VLOOKUP, XLOOKUP, Data Reconciliation