IAM Governance Analyst

Kuala Lumpurvia Encora CareersPosted Jul 24, 2026
Match with my CV

Technical skills

CybersecurityTechnical writing

Methods

Operations

Role signals

Legal

About this role

Role Summary: IAM Governance Analyst is responsible for establishing, maintaining the Identity and Access Management (IAM) governance framework. This role ensures that IAM policies, standards, governance processes, and oversight mechanisms are effective, auditable, and aligned with organizational risk management and regulatory requirements.

Key Responsibilities

  • IAM Governance Framework
  • Oversees the compliance to IAM policies, standards, procedures, and governance documentation.
  • Define and maintain IAM RACI matrices and stakeholder network for data ingestion.
  • Establish governance workflows for Access provisioning, recertification management, privileged access framework, and exception management.
  • Ensure proper documentation and managing evidence management practices across IAM processes.
  • Risk and Governance Oversight
  • Established oversight of Joiner, Mover, Leaver (JML), access review, and privileged access processes.
  • Reduce IAM governance gaps and coordinate remediation activities.
  • Track and report IAM risks, issues, and remediation actions.
  • Metrics and Reporting
  • Develop and implement IAM KRI/KPI dashboards.
  • Tracking and Monitor governance effectiveness and escalation thresholds.
  • Audit and Regulatory Support
  • Prepare the submission of issue closure.

- Required Skills & Experience

  • 5+ years of experience in IAM, IT Risk, Cybersecurity Governance, or Technology Controls.
  • Strong understanding of IAM processes, RBAC, PAM, Access Certification, and JML controls.
  • Experience in governance framework development and policy management.
  • Excellent stakeholder management and communication skills.

- Preferred Qualifications

  • CISM, CRISC or equivalent.
  • Experience in financial services or highly regulated environments.

Before you apply

  • 1Which parts of your CV prove experience with Cybersecurity, Operations, and Legal?
  • 2Which recent work examples would make your application stronger for this role?
  • 3What details from the original source listing should you confirm before applying?

Loading similar active roles...