Business Analyst – Cybersecurity (IAM Audit Analyst)

Job Summary
Our client, a leading financial services provider, is seeking a Business Analyst with a focus on IAM Audit to join their Identity & Access Management (IAM) Governance team. This is a contract opportunity running from late August through December 2026, with the possibility of long-term conversion for strong performers. The IAM Audit Analyst leads internal and external audit engagements focused on Identity and Access Management, IT controls, and cybersecurity, overseeing audit request execution, evaluating evidence, and partnering with First and Second Line of Defense teams to ensure strong governance and compliance across access management processes.

Core Responsibilities

• Manage IAM audit requests, partnering directly with internal and external auditors to prepare and present evidence demonstrating IAM control effectiveness
• Conduct and review walkthroughs and testing of application controls, interface controls, and IAM processes (provisioning, deprovisioning, access certifications, and Privileged Access Management)
• Partner with implementation owners to define audit scope and objectives and develop testing strategies based on risk assessment
• Ensure audit readiness across IAM processes and validate that IAM controls — including Separation of Duties (SoD) and standard user access controls — are functioning effectively
• Identify and evaluate risks, control gaps, and remediation actions, working across business, technology, risk, and control functions to drive issue resolution and remediation tracking
• Draft audit findings, reports, and recommendations, including status updates, memos, and final closure packages
• Communicate audit status and findings to business stakeholders and leadership

Required Skills/Experience (Must-Haves)

• 5+ years of experience in IT audit, risk, and controls with strong hands-on Identity & Access Management (IAM) experience
• Deep knowledge of IAM controls: user provisioning/deprovisioning, access certifications and reviews, Privileged Access Management (PAM), standard user access controls, and Separation of Duties (SoD)
• Experience supporting internal and external audits, including collecting audit evidence and presenting control walkthroughs to auditors
• Background working with Risk Management or First Line of Defense (1LOD) teams
• Experience with IAM technologies such as SailPoint, Saviynt, Okta, Azure AD, or CyberArk
• Understanding of IT General Controls (ITGC) and compliance frameworks (SOX, ISO, etc.)
• Strong analytical, documentation, and reporting skills, with excellent communication and stakeholder management abilities

Preferred Skills/Experience (Nice-to-Haves)

• SOX/SOC audit experience
• Familiarity with security frameworks such as NIST
• Certifications such as CISA, CISSP, or CRISC (ISACA, ISC2, or equivalent)
• Experience with IAM governance and access certification programs
• Experience with cloud IAM environments (Azure, AWS, GCP)
• Financial services industry experience

Key Competencies & Behaviors

• Self-starter able to work independently with minimal supervision and hit the ground running
• Highly organized, detail-oriented, and a quick learner
• Comfortable in a fast-paced, dynamic environment with tight deadlines and multiple simultaneous projects
• Strong risk and control mindset with sound business judgment
• Strong communication and presentation skills, especially when interacting with auditors

Work Environment

• Location: Chicago, IL (333 S Wabash)
• Hybrid: 3 days onsite per week (Wednesday mandatory, plus two days of the contractor's choosing), 8:00am – 5:00pm CST

Compensation & Benefits

• Pay Range: The approximate pay range for this position is between $59.00 and $64.00 per hour. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP)
• 401K offered

About KellyMitchell
At KellyMitchell, our culture is world class. We're movers and shakers! We don't mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.

Marketing Disclosure
By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.careers.kellymitchell.com/privacy-policy