Schedule

Mon - Fri Flex

Overview

The Access Control Administrator supports the Credit Union's access governance program by assisting with access reviews, entitlement governance, compliance activities, audit support, and access risk management. This role helps ensure user access remains appropriate, auditable, compliant, and aligned with business needs, regulatory requirements, and the principle of least privilege. 

The position collaborates with application owners, Information Security, Compliance, Risk Management, and IT teams to support access governance processes and maintain effective access controls across the enterprise. 

Responsibilities

Access Governance and Reviews 

• Perform periodic user access reviews and certification activities across enterprise applications and systems. 
• Assist with enterprise access certification campaigns, including preparation, tracking, and documentation of review results. 
• Analyze access assignments to identify excessive permissions, dormant accounts, segregation of duties conflicts, and other access-related risks. 
• Support role-based access control (RBAC) governance through role documentation, validation, and review activities. 
• Assist with entitlement governance to ensure access aligns with business responsibilities and least privilege principles. 
• Maintain access governance records, certification evidence, and supporting documentation. 
• Escalate access control issues, policy exceptions, and governance concerns to the Sr Access Control Administrator. 

Audit, Compliance, and Reporting 

• Support internal audits, external audits, and regulatory examinations by preparing evidence and documentation. 
• Assist with remediation efforts resulting from access reviews, audit findings, and control assessments. 
• Generate reports and metrics related to access governance and certification activities. 
• Support compliance with applicable regulatory and security requirements, including FFIEC, NCUA, GLBA, PCI-DSS, and internal security standards. 

Governance Operations 

• Assist with segregation of duties (SoD) reviews and remediation tracking. 
• Support periodic reviews of elevated and sensitive access assignments. 
• Maintain governance procedures, standards, and operational documentation. 
• Participate in access governance process improvement initiatives. 
• Utilize ServiceNow, Jira, Confluence, and other enterprise tools for tracking, documentation, and collaboration. 

Collaboration and Continuous Improvement 

• Partner with application owners, business managers, Information Security, Compliance, Risk Management, and IT teams to support access governance activities. 
• Assist with special projects related to identity governance, access controls, compliance, and audit readiness. 
• Stay informed on IAM, access governance, cybersecurity best practices, and applicable regulatory expectations.

Qualifications

Qualifications: 

•  Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent hands-on experience.  
• 2-3 years with experience in auditing, compliance, risk management, quality assurance, financial services, operational controls, access reviews, or related fields preferred. 
• Experience supporting reviews, documentation, reporting, or compliance activities is a plus. 
• Strong attention to detail and analytical skills. 
• Ability to review information, identify inconsistencies, and follow established procedures. 
• Strong organizational, documentation, and communication skills. 
• Ability to manage multiple priorities and work effectively with business and technical teams. 
• Proficiency with Microsoft Office applications, particularly Excel and Outlook. 
• Demonstrated willingness to learn access governance, audit, compliance, and information security concepts. 
• Familiarity with audit, compliance, governance, risk management, or access control processes. 
• Familiarity with ServiceNow, Jira, Confluence, or similar workflow and documentation tools. 
• Exposure to Identity and Access Management (IAM), access reviews, or regulatory compliance concepts.