IAM/IGA Business Systems Analyst & CIAM

Swapna Pogula

Email : *********@*****.***

Contact : 510-***-****

Work Authorization : US Citizen

Professional Summary:

Leadership-driven IAM/IGA Business Systems Analyst and CIAM Certified Practitioner specializing in access lifecycle management, role design, and governance improvements. Proven experience in IAM lifecycle management and running large-scale user access reviews, entitlement/role certification campaigns with business owners and application teams. Strong background in requirements gathering, workflow mapping, and cross-team coordination. Adept at UAT planning, test execution, and issue resolution for IAM enhancements. Recognized for improving processes and elevating operational maturity. Leads ITGC validation, IGA operations, and full-cycle audit support, ensuring control design integrity, consistent operational execution, and strict alignment with SOX and enterprise compliance frameworks.

Core Competencies:

Audit Standards & Control Frameworks: NERC CIP, NIST CSF, SOX, SOC, ISO 27001, PCI DSS, ITGC Testing, User Access Reviews

Identity Lifecycle Management: Provisioning, Deprovisioning, RBAC, Joiner-Mover-Leaver (JML) on SailPoint IIQ, OIM, SUN IDM

Privileged Access Management (PAM): Beyond Trust, CyberArk — password vaulting, service account governance, lifecycle management

Platforms & Tools: ServiceNow, Jira, Active Directory, Mainframes, AS400, Microsoft Office Suite, Visio

Cloud & Hybrid IAM Integrations UAT Planning & Execution Requirements & Workflow Documentation

Data & Reporting: SQL (basic), Excel (VLOOKUPs, pivot tables), process mapping, SOP development

1.Paylocity Identity & Access Management June 2026 – Present

Managed identity lifecycle (Joiner/Mover/Leaver) via SailPoint IIQ — provisioning, deprovisioning, entitlement and ownership changes — meeting SLA targets on high-volume ServiceNow tickets.

Enforced access governance policies by resolving entitlement and authentication requests in line with least-privilege standards.

Maintained SOPs and knowledge base articles, analyzing ticket trends to drive process improvements.

Supported RBAC design, User Access Reviews, and cloud migration initiatives with senior engineers, ensuring audit-ready compliance documentation.

Reported weekly on ticket backlog, SLA performance, and certification metrics to reduce risk and improve compliance posture.

2.TriNet Inc. (Jan 2019 – Mar 2026) – Lead IAM Security Analyst

Performed testing using SailPoint IGA across Access Controls, Change Management, validating control design and operating effectiveness through walkthroughs and evidence-based testing.

Administer platform configurations while supporting audit needs and maintaining access lifecycle processes.

Partnered with engineering, security, cloud, and compliance teams to implement access controls while providing operational support for SailPoint IIQ access workflows and observability dashboards, ensuring timely delivery and successful adoption across the organization.

Led SOX Logical Access testing activities, supporting audit walkthroughs, evidence collection, and remediation tracking to ensure compliance with regulatory and internal control requirements.

Coordinated and executed SailPoint IIQ access review and certification campaigns, ensuring adherence to SOX and internal security standards.

Monitored, assigned, investigated, and resolved access service requests including provisioning, deprovisioning, job changes, and terminations across enterprise applications and ensured alignment with RBAC, birthright provisioning, and least privilege principles.

Led enterprise-wide Privileged Access Management (PAM) SailPoint IGA initiatives with a strong focus on service account governance, lifecycle management, and compliance alignment.

Analyzed data to support audit testing, access reviews, and compliance reporting for all SOX applications.

Create and manage Jira stories, updates to ensure accurate documentation and smooth coordination with IAM and engineering teams.

Participate in User Acceptance Testing (UAT) phases for defect fixes, enhancements on application in SailPoint IIQ

3.ERCOT Senior IAM Analyst Jan 2018 – Jan 2019

Developed and maintained SOPs, process flows, and compliance documentation to support ITGC control execution and audit readiness.

Collected and validated evidence for TRE audits, partnering with audit engagement teams and management to confirm corrective actions for self reports, with emphasis on NERC CIP 004 R4 (Training & Access Management) and CIP 007 R5 (System Access Controls).

Supported key ITGC activities including access recertification, privileged access monitoring, and password administration through CyberArk.

Executed identity lifecycle controls such as role modifications, reconciliations, and provisioning/deprovisioning to ensure accuracy and compliance with access governance standards.

Produced audit, reconciliation, and control supporting reports using Excel and SQL to validate access accuracy and support control testing.

4.Nike Technologies Business Analyst – IAM Jun 2017 – Dec 2017

Gathered and documented requirements for onboarding applications into SailPoint, ensuring access models, entitlement structures, and workflow controls aligned with organizational security and compliance standards.

Used Jira to capture business requirements, maintain onboarding documentation, and track progress throughout the application integration lifecycle.

Defined test scenarios based on business processes and supported UAT and integration testing to validate access controls, workflow functionality, and system behavior.

Managed and documented onboarding, offboarding, entitlement automation, and approval workflow processes to ensure consistent and compliant execution of identity lifecycle activities.

5.Synchrony International Services Sr. Audit & Reporting Analyst Jul 2012 – Feb 2017

Performed ITGC walkthroughs, assessed control gaps, and maintained audit-ready documentation.

Updated SOPs and created process flow maps in Visio.

Supported access attestation cycles and analyzed recertification data.

Managed CDI uploads and generated audit/reconciliation reports using Excel and SQL.

Performed access administration using SUN IDM and OIM; maintained provisioning and review documentation.

Ran access certification campaigns and supported migration testing from SUN IDM to OIM, including RBAC analysis.

6.Bank of America Team Developer Mar 2006 – Mar 2012

i.Global Access Operations

Administered user access across OIM and Active Directory, including account creation, modification, permissions, and policy based access controls for employees and contractors.

Managed security configurations, account policies, and access rights while supporting governance activities such as change management and quarterly access reviews.

Supported internal audits, contingency planning, and business continuity testing by providing documentation, evidence, and control validation.

ii.E Discovery & Incident Management (Insider Threat)

Processed electronic data and maintained litigation ready evidence in alignment with e Discovery and compliance procedures.

Conducted forensic investigations by collecting, preserving, and analyzing digital evidence, ensuring adherence to chain of custody and governance standards.

Identified and documented security events, validated true vs. false positives, and reviewed vulnerability findings to support incident response and risk mitigation.

iii.Client Servicing (Account Maintenance, Research & Resolution)

Managed account setup, service assignments, and transaction approvals while ensuring adherence to banking controls and compliance requirements.

Investigated discrepancies, fraud indicators, and account issues, coordinating corrective actions with internal teams.

Developed audit checklists, trained new associates, and coordinated workflow for a 140 member team; generated reports and contributed to process improvement initiatives.

Certifications & Training

Certified Identity and Access Manager (CIAM)®

ITIL 2011 foundation certified

Signed up for professional training in Generative AI for Business with Microsoft Azure OpenAI

Education

MBA, Banking — Sikkim Manipal University (2012)

Bachelor of Computer Applications — Osmania University (2003)

Contact this candidate