Identity Access & User Rights Review Manager

Saved job description

Overview

The Identity Access & User Rights Review Manager leads the enterprise program responsible for ensuring that logical access controls, user provisioning and entitlement reviews are conducted in accordance with regulatory expectations, internal policy and industry best practices. The Identity Access & User Rights Review Manager will manage a team of analysts, drive program strategy and serve as the primary liaison between Risk Management, Information Security, Internal Audit and line-of-business management on access governance matters.

Location listed is preferred office location but other locations and working remotely within the Renasant footprint may be considered based upon convenience and business necessity. 

RENASANT BANK IS AN EQUAL OPPORTUNITY EMPLOYER

Responsibilities

Lead and manage the enterprise User Access Review (UAR) program, including periodic recertification cycles for all critical applications, systems and data repositories

Develop, maintain and enhance policies, procedures and standards governing identity and access management (IAM) reviews

Oversee quarterly, semi-annual and annual user rights recertification campaigns across all business units and technology platforms

Ensure timely identification, escalation and remediation of access violations, excessive privileges, segregation of duties (SoD) conflicts and orphaned accounts

Manage and develop a team of Identity Access Analysts, providing coaching, performance feedback and career development guidance

Collaborate with Information Security, IT Operations, and application owners to maintain accurate role-based access control (RBAC) frameworks

Partner with Internal Audit and Compliance to address examination findings, regulatory expectations (OCC/FDIC/Fed guidance, FFIEC) and audit recommendations related to access governance

Produce executive-level reporting on access review completion rates, exception trends, SoD violations and program health metrics for Risk Committee and Board-level consumption

Drive continuous improvement through automation, tooling enhancements and integration with identity governance platforms (e.g., SailPoint, Saviynt, CyberArk, or equivalent)

Coordinate with HR and business managers to ensure joiners, movers and leavers (JML) processes are properly reflected in access entitlements

Lead incident response coordination when unauthorized access or privilege escalation events are identified

Maintain awareness of regulatory changes, industry trends, and emerging threats related to identity access risk

Perform other related duties as assigned

Qualifications

Bachelor's degree required; Information Security, Computer Science, Business Administration, Risk Management or related field preferred

Minimum of 7 years of experience in identity and access management, IT risk, information security or IT audit within financial services

Minimum of 3 years of direct people management experience

Professional certifications preferred: CISA, CISM, CISSP, CRISC, or equivalent

Strong understanding of regulatory frameworks: FFIEC, GLBA, SOX (IT General Controls), NIST CSF, CIS Controls

Good knowledge of IAM/IGA platforms (SailPoint, Saviynt, CyberArk, Okta, Azure AD/Entra ID, or equivalent)

Familiar with core banking systems, lending platforms and enterprise applications common to community/regional banking

Ability to communicate technical access governance concepts to non-technical senior leadership

Ability to think strategically and translate regulatory requirements into executable programs

Strong project management and ability to manage multiple concurrent recertification campaigns

Excellent stakeholder management across technology, business and risk functions

Analytical rigor with data-driven approach to exception management and risk prioritization

Ability to drive accountability with application owners and business line managers

Physical Demands

The physical demands described are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is frequently required to stand or sit; kneel, stoop, or squat; use hands or fingers to handle or feel objects, tools or controls; reach with hands and arms, and talk or hear. The employee is occasionally required to walk. The employee must occasionally lift and /or move up to 25 pounds. Specific vision abilities required by this job include close vision, peripheral vision, depth perception and the ability to focus.

Work Environment

The Bank’s professional working environment requires employees to communicate effectively, both verbally and in writing. Employees must demonstrate strong interpersonal skills when working closely with internal business partners and external clients. Employees may be exposed to confidential and propriety information within the working environment, therefore, must uphold confidentiality at all times. Due to the possibility of being exposed to high risk situations (i.e. robbery), detailed instructions and procedures are required to be followed at all times to safeguard the Bank’s employees, customers, and assets.

The above is intended to describe the general content of and requirements for the performance of this job. It is not to be construed as an exhaustive statement of duties, responsibilities, or requirements. The principal duties and responsibilities enumerated are all essential job functions except for those that begin with the word “May”.

This job description is intended to describe the normal level of work required by the person performing the work. The principle duties outlined are the essential responsibilities and duties.  Other duties may be assigned as needs arise.  Job requirements and/or processes may be modified to reasonably accommodate persons with a disability as required by law.

This description is not intended as a contract and is subject to change. Any written contractual agreements supersede this job description.