Identity Controls Governance II

Northwestern Mutual•Milwaukee, WI

20h•Hybrid

About The Position

About the Job: You will play a key role within our Certification Administration Team, responsible for executing user access certification processes. Access certifications are crucial in safeguarding our policyholders' sensitive information and maintaining the security and integrity of our company's operations. By ensuring that access rights are properly managed, you will protect our clients' data from unauthorized access and potential breaches. This role directly contributes to the trust and confidence our clients place in us to protect their data. Through your efforts, you will enhance our security posture and support the continuous improvement of our governance framework, making a tangible impact on both the company and the individuals we serve. What You'll Do: Execute periodic user access certification campaigns according to established schedules and procedures. Assist with execution and support of Segregation of Duties (SoD) reviews to ensure compliance and control integrity. Analyze user access data to identify discrepancies, potential security risks, and compliance issues, providing actionable insights. Thoroughly document certification results and findings to ensure accuracy and facilitate effective communication and reporting. Support, educate, and resolve questions from people leaders across the company as they perform reviews of their team’s access. Participate in the development and refinement of new access certification requirements and processes. Develop and maintain comprehensive process documentation for access certifications, ensuring accuracy and accessibility for team members and stakeholders. Research and propose solutions to enhance access certification processes and strengthen overall security posture. Work cross-functionally to integrate and align access certification strategies with organizational goals. Prepare and provide necessary access certification evidence for internal and external audits.

Requirements

Bachelor’s degree or equivalent experience.
Minimum of 2 years of experience in IT Governance, Compliance, Identity & Access Management, or related operational control roles.
Practical experience with or exposure to user access certifications and related processes desired.
Familiarity with identity governance tools (e.g., SailPoint IdentityIQ) or willingness to learn.
Experience with ServiceNow or other service management/ticketing systems preferred.
Strong working knowledge of Excel for data review and reporting; basic familiarity with business intelligence tools (e.g., Power BI) is a plus.
Ability to work independently on assigned tasks and collaboratively within a team.
Comfortable following established processes and procedures, and escalating appropriately when issues require senior-level review.
Strong analytical and problem-solving abilities, paired with a strategic mindset to tackle challenges effectively.
Detail-oriented with a commitment to accuracy, quality, and continuous improvement in all tasks and processes.
Strong written and verbal communication skills; able to explain findings, recommendations, and instructions clearly to both technical and non-technical stakeholders.

Responsibilities

Execute periodic user access certification campaigns according to established schedules and procedures.
Assist with execution and support of Segregation of Duties (SoD) reviews to ensure compliance and control integrity.
Analyze user access data to identify discrepancies, potential security risks, and compliance issues, providing actionable insights.
Thoroughly document certification results and findings to ensure accuracy and facilitate effective communication and reporting.
Support, educate, and resolve questions from people leaders across the company as they perform reviews of their team’s access.
Participate in the development and refinement of new access certification requirements and processes.
Develop and maintain comprehensive process documentation for access certifications, ensuring accuracy and accessibility for team members and stakeholders.
Research and propose solutions to enhance access certification processes and strengthen overall security posture.
Work cross-functionally to integrate and align access certification strategies with organizational goals.
Prepare and provide necessary access certification evidence for internal and external audits.