Senior Staff Engineer - IT-3

Position Overview:

This position will primarily concentrate on automating User Access Reviews and ensuring Audit Compliance, along with other ITRM responsibilities as assigned. The selected candidate will oversee user access review automation, maintain regulatory compliance, and actively support audit functions. This role requires deep expertise in access control, compliance mandates, and hands-on experience with implementing and managing automated solutions.

Key Responsibilities:

User Access Review Automation:

• Design, implement, and manage automated user access review solutions.
• Develop, enhance, and maintain scripts, tools, and processes to optimize access review workflows.
• Collaborate closely with IT and security teams to integrate access review systems into the existing technology landscape.
• Continuously monitor and verify the accuracy and effectiveness of automated access review processes.
• Perform quality assurance (QA) reviews to ensure process integrity.

Audit Compliance:

• Maintain compliance with all relevant regulatory frameworks, such as SOX, SOC 2, PCI, HIPAA, and other applicable standards.
• Prepare and manage documentation to support both internal and external audits and compliance reviews.
• Conduct periodic internal audits to confirm adherence to established access control policies and procedures.
• Provide required documentation and address issues during external audits.
• Conduct or support Vendor Audits to ensure that R1s vendors comply with contractual and regulatory obligations.

Qualification:

• Bachelors degree in information technology, Cybersecurity, Business Administration, or related field.
• Demonstrated experience in user access review automation, audit compliance, or similar disciplines.
• Strong command of access control methodologies, regulatory frameworks, and compliance standards.
• Proficiency in scripting and automation technologies (e.g., Python, PowerShell, Java).
• Practical experience with identity and access management (IAM) systems and associated tools.
• Superior analytical, problem-solving, and organizational abilities.
• Excellent communication and interpersonal skills with a proven ability to collaborate effectively with cross-functional teams.
• Relevant certifications such as CISA, CISM, CISSP, or equivalent credentials are highly desirable