Business analyst-Business Analyst - IAM

Business Analyst - Identity Access Management (IAM) / User Access Management (UAM) Job Title

Business Analyst - Identity Access Management (IAM) / User Access Management (UAM)

Experience

5-10 years of relevant experience in Business Analysis, with strong experience in IAM/UAM, access governance, and enterprise security processes.

Job Summary

We are looking for an experienced Business Analyst with strong Identity and Access Management (IAM) / User Access Management (UAM) domain expertise to bridge business requirements and technical solutions.

The ideal candidate will have hands-on experience in access governance, Role-Based Access Control (RBAC), Joiner-Mover-Leaver (JML) processes, user provisioning/de-provisioning, access certification, Segregation of Duties (SoD), Privileged Access Management (PAM), compliance, and stakeholder management across enterprise environments.

The candidate will work closely with business stakeholders, application owners, security teams, IAM architects, developers, and technology teams to define requirements and support the successful delivery of IAM initiatives.

Key Responsibilities

• Gather, analyze, validate, and document business requirements for IAM/UAM initiatives.

• Conduct requirement-gathering workshops, stakeholder interviews, and discovery sessions.

• Work with business stakeholders, application owners, security teams, and technology teams to define access management requirements.

• Analyze existing IAM/UAM processes and identify opportunities for process improvement, standardization, and automation.

• Define and document Joiner, Mover, Leaver (JML) processes.

• Define requirements for user onboarding, provisioning, modification, access requests, approvals, de-provisioning, and termination.

• Define and document Role-Based Access Control (RBAC) requirements and role models.

• Support access certification and periodic access recertification processes.

• Analyze and document Segregation of Duties (SoD) requirements and conflicts.

• Support Privileged Access Management (PAM) initiatives and privileged access governance.

• Prepare and maintain Business Requirement Documents (BRD), Functional Requirement Documents (FRD), user stories, acceptance criteria, process flows, use cases, and functional specifications.

• Translate business requirements into clear and actionable requirements for IAM architects and engineering teams.

• Collaborate with technical teams on IAM integrations, provisioning workflows, application onboarding, and access governance solutions.

• Support IAM implementation, migration, transformation, and enhancement projects.

• Participate in application onboarding and access model definition activities.

• Define UAT strategy, test scenarios, test cases, and acceptance criteria.

• Coordinate User Acceptance Testing (UAT) and support defect identification, tracking, and resolution.

• Maintain requirement traceability throughout the project lifecycle.

• Support production deployment, post-production validation, and transition activities.

• Ensure IAM processes align with organizational security policies, regulatory requirements, and audit controls.

• Support internal and external audits by providing requirements, process documentation, evidence, and control information.

• Prepare process documentation, SOPs, workflow diagrams, and operating procedures.

• Track project deliverables, dependencies, risks, issues, and action items.

• Communicate project status, requirements, and key decisions to business and technical stakeholders.

Required Skills IAM / UAM Domain Knowledge

Strong understanding of enterprise IAM/UAM concepts, including:

• Identity and Access Management (IAM)

• User Access Management (UAM)

• Identity Lifecycle Management

• Joiner-Mover-Leaver (JML)

• User provisioning and de-provisioning

• Access request and approval workflows

• Role-Based Access Control (RBAC)

• Role engineering and role design

• Access certification / recertification

• Segregation of Duties (SoD)

• Privileged Access Management (PAM)

• Least-privilege access

• Access governance

• Application onboarding

• Identity lifecycle automation

• Authentication and authorization concepts

• Compliance and audit controls

Business Analysis Skills

• Strong requirement gathering and analysis skills.

• Experience creating BRDs, FRDs, user stories, use cases, process flows, and functional specifications.

• Ability to convert business requirements into detailed functional requirements.

• Strong stakeholder interview and workshop facilitation skills.

• Experience defining acceptance criteria and business rules.

• Requirement traceability and change management.

• Strong analytical and problem-solving capabilities.

• Experience with Agile/Scrum and/or Waterfall methodologies.

• Experience supporting UAT and defect management.

• Strong documentation and presentation skills.

Technical / Tool Knowledge

Exposure to one or more IAM platforms is preferred, such as:

• SailPoint IdentityIQ / IdentityNow

• Saviynt

• Okta

• Microsoft Entra ID / Azure AD

• CyberArk

• Ping Identity

• ForgeRock

• Other enterprise IAM/UAM platforms

Experience with the following is an advantage:

• Active Directory

• LDAP

• SSO

• SAML

• OAuth 2.0

• OpenID Connect (OIDC)

• REST APIs

• SQL

• Identity governance and administration (IGA) platforms

• ServiceNow or other ITSM platforms

• JIRA / Confluence

• Visio / Lucidchart / Draw.io

Compliance Security Knowledge

Good understanding of IAM-related security and compliance requirements, including:

• Least Privilege

• Access Control

• SoD controls

• Audit requirements

• Periodic access reviews

• User lifecycle controls

• Security policies and standards

• Regulatory and compliance requirements

• Internal and external audit processes

Knowledge of frameworks such as SOX, ISO 27001, NIST, GDPR, PCI-DSS, or similar regulatory/control frameworks is an advantage.

Stakeholder Management

The candidate should be comfortable working with multiple stakeholder groups, including:

• Business stakeholders

• Application owners

• IAM/security teams

• Information Security

• IAM architects

• Developers and engineering teams

• Infrastructure teams

• Compliance and Risk teams

• Internal/External Audit

• Project and Program Managers

Strong communication, negotiation, presentation, and stakeholder-management skills are essential.

Education

• Bachelors degree in Computer Science, Information Technology, Business Administration, or a related field.

• Relevant IAM, cybersecurity, or business analysis certifications are an advantage.

Preferred Certifications

Any of the following would be an advantage:

• CBAP / CCBA

• PMI-PBA

• Certified Scrum Product Owner (CSPO)

• CISSP

• CISM

• IAM/IGA vendor certifications

• SailPoint certification

• Saviynt certification

• Okta certification

Key Deliverables

The Business Analyst will be responsible for producing and maintaining:

• Business Requirement Documents (BRDs)

• Functional Requirement Documents (FRDs)

• User Stories

• Acceptance Criteria

• Use Cases

• Business Rules

• IAM/UAM Process Flows

• JML Workflow Documentation

• RBAC/Role Requirements

• Access Certification Requirements

• SoD Requirements

• UAT Test Scenarios and Test Cases

• Requirement Traceability Matrix (RTM)

• Process/SOP Documentation

• Stakeholder Meeting Minutes and Action Items

Ideal Candidate Profile

The ideal candidate is someone who combines strong Business Analysis skills with practical IAM/UAM domain knowledge. They should be capable of understanding business access requirements, analyzing existing processes, identifying control gaps, and translating requirements into clear functional specifications for IAM technology teams.

Experience working on enterprise IAM implementations, IGA transformations, application onboarding, access governance, JML automation, RBAC, access certification, and compliance initiatives will be highly valued.

Keywords for Job Portals

Business Analyst, IAM, Identity and Access Management, UAM, User Access Management, IGA, Identity Governance, SailPoint, Saviynt, Okta, Entra ID, Azure AD, RBAC, Role Based Access Control, JML, Joiner Mover Leaver, Provisioning, De-provisioning, Access Certification, Access Recertification, SoD, Segregation of Duties, PAM, Privileged Access Management, Identity Lifecycle Management, BRD, FRD, User Stories, UAT, Requirement Gathering, Business Requirements, Access Governance, IAM Implementation, IAM Migration, Cybersecurity, Information Security.

Disclaimer: This job description has been sourced from a public domain and may have been modified by Naukri.com to improve clarity for our users. We encourage job seekers to verify all details directly with the employer via their official channels before applying.