Identity Governance & Access Analyst II

Position Overview Mortgage Cadence is a leading fintech company that develops innovative platforms for mortgage lending and loan origination. The company helps lenders streamline the mortgage process through automation, compliance management, workflow optimization, and digital document solutions. While headquartered in the United States, Mortgage Cadence operates globally, supporting organizations with technology that improves efficiency, enhances regulatory compliance, and delivers a better lending experience. At Mortgage Cadence, we are committed to building secure, scalable, and resilient technology solutions that enable our customers to navigate the complexities of the mortgage industry with confidence. About the Team Our Identity and Access Management (IAM) team ensures the right people have the right access to the right systems at the right time. We manage identity lifecycle, access governance, and compliance controls across the organization's application and infrastructure landscape. About the Role We're looking for an Identity Governance & Access Analyst II to join our IAM team. This role owns access governance processes end-to-end — running certification campaigns, driving remediation of access risks, and improving the controls themselves — rather than just executing existing workflows. You'll work closely with application owners, security, and compliance teams, auditors and act as a go-to resource for how access governance works across our environment, including Microsoft Entra ID and related tooling. This is a strong fit for someone with several years of hands-on IAM or security compliance experience who's ready to take more ownership of governance processes, mentor junior team members, and help shape how we run access reviews going forward. Responsibilities: Own end-to-end execution of periodic user access reviews and certification campaigns, including scoping, scheduling, and driving completion with application/system owners Design and refine access request, approval, and exception workflows to align with least-privilege and segregation-of-duties principles, including onboarding and offboarding as needed. Configure and maintain identity governance workflows in Microsoft Entra ID (Azure AD), Microsoft Active Directory, Okta and related identity governance tooling, including policy and rule updates Lead investigations into access anomalies, orphaned accounts, and policy violations, and drive remediation with accountable stakeholders Maintain and improve role and entitlement mappings across in-scope applications and systems, identifying gaps in role design and ensuring strict adherence to Role-Based Access Controls (RBAC) Serve as a primary point of contact for internal and external audits, preparing evidence and speaking to control design and operation Author and maintain process documentation, control procedures, standard operating procedures, and identify opportunities to automate or streamline where possible Partner with IAM engineers, security, and compliance stakeholders to design process improvements and control enhancements Track, analyze, and report on access review metrics, findings, and remediation trends to team leadership Mentor junior analysts on governance processes and tooling. 3–5 years of experience in identity governance, IAM, IT security, or compliance, with direct experience running access reviews or certification campaigns Solid working knowledge of identity and access management concepts (authentication, authorization, provisioning/deprovisioning, RBAC, SoD) Hands-on experience with Microsoft Entra ID (Azure AD), including governance features, conditional access, or entitlement management as well as Okta or similar IDP implementations Scripting or automation experience (PowerShell, Python, Octopus, Ansible) for reporting or workflow automation Experience designing or improving access governance processes, not just executing existing ones Strong analytical skills — comfortable working with structured data to identify trends, gaps, and risks across access reviews Track record of working directly with auditors or compliance teams to support control testing Excellent written and verbal communication skills, with the ability to explain access risk to both technical and non-technical stakeholders A compliance-minded, risk-aware approach: you understand the "why" behind controls and can push back constructively when something doesn't hold up Nice to Have Experience with identity governance platforms other than Entra ID (e.g., legacy Microsoft Active Directory) Familiarity with compliance frameworks relevant to your industry (e.g., SOX, SOC 1 & 2, NIST, ISO 27001), including having supported a formal audit cycle General working knowledge of AI tools such as Copilot or Claude Relevant certifications: Security+, SC-300 (Identity and Access Administrator), CIGA, CISA, or similar Why Join Us Ownership of meaningful governance processes with real influence on how controls are designed Mentorship and career growth toward IAM Engineer, IAM Architect, or Identity Governance Lead roles Direct exposure to enterprise-scale identity governance and audit processes