Identity Management Analyst

5 - 7 years experience  •  Biotech/Pharma

Salary depends on experience
Posted on 10/30/17
Scottsdale, AZ
5 - 7 years experience
Salary depends on experience
Posted on 10/30/17

The IAM group within the Security Operations and Services organization is responsible for the implementation and support of IAM tools and technologies that protect McKesson’s critical IT assets, including customer-facing and workforce applications.  The Identity Management Business Analyst’s role is responsible for supporting the enterprise wide user governance processes and facilitate the compliance activities, in addition to understanding the business requirements of the applications that are potential migration candidates to the IAM platform. 



Position Description


Key areas of responsibility include:

  • User Access Review (UAR)
    • Promote the Information Security Risk Management (ISRM)  supported UAR and IAM toolsets across the McKesson application support community
    • Produce and continue to enhance the customer facing program material in accordance with the McKesson communication policy
    • Oversee the user access review assessments for initial promotion/discussion to the completion of the process
    • Produce auditable artifacts related to UAR review activity, store material securely
    • Respond to audit inquiries related to the UAR process
    • Produce and maintain program metrics
    • Provide continuous improvement to the review and governance processes
    • Participate in product evaluations and vendor engagements to provide oversight to the program
    • Document business requirements and work with the IAM technical teams to translate into technical requirements
  • User Access Governance
    • Consult on user access entitlement structure and provide feedback to the application team to help align the application with the appropriate recommended practices
    • Provide consulting on the suite of available IAM solutions supported by the organization
    • Provided IAM feedback to the organization to help model recommended practices through the product selection and deployment processes
    • Support the overall cyber security program by validation of existing controls related to access review and governance
  • Enterprise Role Governance
    • Consult on user access group and role structures in order to facilitate role analysis and optimization
    • Identify, define and document separation of duties (SOD) rules





Minimum Requirements  

4+ years of experience in administering security controls in an organization


Critical Skills

  • Experience with identity and access management projects and initiatives
  • Experience with Identity and Access Management tools such as Saviynt, CA, and Oracle identity governance to configure user access certifications and other IAM-related tasks
  • Solid experience with Excel (to include pivot tables, v-lookups, etc)
  • Strong Project and Time Management skills
  • Understanding of HIPPA, SOX
  • Strong customer service and communication skills
  • Ability to handle multiple tasks, prioritize and meet deadlines
  • Strong interpersonal and influencing skills
  • 4+ years in Information Security or Compliance related services, IT audit, Internal Audit and/or Risk Management Experience. 
  • Able to exercise professional judgment within defined policies and procedures
  • Familiar with healthcare, privacy, or financial compliance regulations and IT and security frameworks and standards 

Additional Knowledge & Skills

  • Understanding of one or more control frameworks such as HIPAA-HITECH, SSAE 16, PCI, HITRUST, ISO 27001, etc.

  • CISA, CISSP, GIAC, or other similar professional designations is preferred

  • Basic understanding of security controls for Windows servers/workstations; Unix, Linux; Oracle is a plus

  • Experience with MS Win 7 & Ofc 2007+, Office 365, MS Visio, Winzip, and Archer is a plus

  • Experience with Agile project management; SAFe – Scaled Agile Framework


  • 4-year degree in computer science or related field or equivalent experience


Not the right job?
Join Ladders to find it.
With a free Ladders account, you can find the best jobs for you and be found by over 20,0000 recruiters.