About the Role

Owns requirements, process design and stakeholder alignment on IGA programs. Translates audit findings, compliance obligations and the way a business grants access into a governed identity model the platform can enforce.

Key Responsibilities

• Run current-state discovery: access request and approval processes, application and entitlement inventory, authoritative source analysis, joiner-mover-leaver process mapping, and identification of governance gaps. 
• Elicit and document requirements for identity lifecycle automation, access request and approval flows, certification scope and cadence, SoD policy, and delegated administration models. 
• Facilitate role engineering workshops with business and application owners — role mining output validation, role definition and hierarchy, entitlement description cleanup and risk rating. 
• Own the application onboarding pipeline: intake questionnaire, connector feasibility assessment with engineering, data and attribute mapping, owner identification, and the onboarding runbook. 
• Design certification campaigns end to end: reviewer models, scope and frequency, escalation paths, revocation and closed-loop remediation, and reviewer fatigue mitigation. 
• Map program controls to audit and compliance drivers — SOX ITGC access controls, HIPAA, PCI DSS, GDPR, NIST 800-53, ISO 27001 — and produce the evidence artifacts auditors will request. 
• Author functional specifications, user stories and acceptance criteria; maintain requirements traceability from control objective through to configured platform behavior. 
• Own UAT: test planning, test case authoring, coordination of business testers, defect triage and sign-off readiness. 
• Build organizational change management material — reviewer and requester training, communications, job aids — and track adoption. 
• Produce program reporting for client steering committees: application onboarding burn-down, campaign completion rates, orphan and dormant account reduction, SoD violation trend, and access request cycle time. 

Basic Qualifications

• CBAP, PMI-PBA or ITIL certification; vendor functional certification on a primary IGA platform. 
• Hands-on configuration exposure to SailPoint, Saviynt or Okta admin consoles; SQL for entitlement and access-data analysis. 
• Role mining or identity data-quality tooling experience. 
• Reporting and dashboard build in Power BI or Tableau for program metrics. 
• Regulated-industry program experience — financial services, healthcare or public sector. 
• Prior work on a legacy IGA migration or a post-audit remediation program. 

Preferred Qualifications

• 7–10+ years in business analysis or consulting, including 4+ years on IAM/IGA programs. 
• Strong working knowledge of IGA concepts: identity lifecycle, entitlements, roles and RBAC, segregation of duties, access certification, access request and provisioning, orphan and dormant accounts, privileged account governance. 
• Requirements engineering discipline — BRD/FRD authoring, user stories and acceptance criteria, process mapping (BPMN or swimlane), traceability matrices. 
• Audit and compliance literacy: SOX ITGC user access controls, least privilege, segregation of duties, and how an access review finding becomes a program requirement. 
• Exposure to at least one IGA platform from the functional side — SailPoint, Saviynt, or Okta Identity Governance — enough to know what is configurable versus custom. 
• Workshop facilitation with business, application, security and audit stakeholders; executive-quality written deliverables. 
• Agile delivery experience (Jira or Azure Boards) and ownership of UAT through sign-off. 
• Consulting presence — comfortable holding a position with a client stakeholder who does not want to own their entitlements. 

Salary Range 

$150k - $170k USD

This is a full-time opportunity with Gruve.

‍