Job Description
We are seeking a detail‑oriented Compliance Manager with deep, hands‑on experience leading User Access Reviews (UARs) across enterprise applications, platforms, and ERP systems. This role is highly execution‑focused and will own the planning, execution, documentation, and remediation of access reviews required to support SOX, PCI, and other regulatory obligations. The ideal candidate understands the real‑world challenges of UARs, including incomplete role design, complex entitlements, and systems that are not audit‑ready, and knows how to partner with application owners to drive timely and defensible outcomes.
This role partners closely with Information Security, IT Operations, Application Owners, Audit, and Legal to ensure access governance controls are effective, repeatable, and aligned with regulatory requirements.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.
Required Skills & Experience
-Bachelor’s degree in Information Technology, Cybersecurity, Audit, or a related field.
-5+ years of hands‑on experience conducting User Access -Reviews (UARs) in enterprise environments.
-Demonstrated experience managing UARs for SOX‑ and/or -PCI‑regulated systems, including ERP and business‑critical applications.
Strong understanding of: Role‑based access control (RBAC), Privileged access risks, Segregation of duties concepts
-Experience performing UARs for new applications or platforms, including defining initial access review scope and approach.
-Experience supporting audits and clearly articulating access review decisions to auditors.
-Strong communication skills, particularly when working with managers responsible for approving or remediating access.
Nice to Have Skills & Experience
-Experience implementing or updating access controls aligned to PCI, SOX ITGCs, NIST, ISO 27001, or CIS Controls.
-Experience updating standards, policies, or guidelines related to access governance.
-Familiarity with GRC tools (e.g., Archer, ServiceNow GRC, OneTrust, MetricStream).
-Professional certifications such as CISA, CRISC, CISSP, or CISM.
Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.