Information Security Analyst - Security Identity at Williams-Sonoma, Inc. in Rocklin, CA

Job description

About the Team You will be part of the Identity and Access Management (IAM) function within the Cyber Security organization. The team is responsible for securing identities, managing access to critical systems, and supporting strong authentication and authorization controls across the enterprise. The IAM function is a critical domain within the WSI Security Governance program. The IAM team’s mission is to protect the organization by ensuring the right individuals have the right access at the right time—while maintaining compliance and enabling business productivity. About the Role As an Information Security Analyst – Identity & Access Management, you will support the daily operation of enterprise identity services, including access provisioning, identity lifecycle activities, authentication support, privileged access requests, and identity governance. This hands-on operational role partners with IAM Engineering and business stakeholders to resolve access issues, maintain accurate access records, support SOX and PCI DSS controls, and improve repeatable processes. The position primarily supports business-hours operations with occasional escalations. Responsibilities Process Joiner/Mover/Leaver activities, including timely provisioning, modification, and deprovisioning of user access in accordance with approved requests and established controls. Validate access requests, required approvals, role assignments, and least-privilege requirements; coordinate with application owners and IT teams to resolve exceptions. Support access reviews, periodic certifications, entitlement validation, and remediation of inappropriate or outdated access. Provide operational support for single sign-on (SSO), multi-factor authentication (MFA), and user authentication issues using Ping Identity, Microsoft Entra ID, and Active Directory. Process privileged access requests and support approved workflows and access controls in Delinea Privileged Access Management (PAM). Assist with service account and non-human identity inventory, ownership validation, access reviews, and lifecycle governance, including Clutch Security workflows. Investigate IAM service tickets and access-related incidents; document troubleshooting, identify root causes where possible, and escalate complex platform issues to IAM Engineering or Security Operations. Support SailPoint IdentityIQ identity governance workflows, including provisioning activities, access certifications, and reconciliation follow-up. Collect, validate, and organize evidence for SOX and PCI DSS audits; help address control exceptions and access-related findings. Identify opportunities to simplify manual work, improve operational procedures, and assist with basic scripting or workflow automation under engineering guidance. Maintain accurate ticket notes, standard operating procedures, and knowledge articles; collaborate with HR, IT Service Desk, Infrastructure, application owners, Security Operations, and Audit/Compliance teams. Criteria 1–2 years of experience in information security, identity and access management, IT service operations, or a related technical field. Bachelor’s degree in a related field or equivalent work experience. Working understanding of identity lifecycle management, access provisioning, least privilege, and role-based access controls. Experience investigating user access issues, managing service requests, and following approval and change-control procedures. Familiarity with Active Directory, Microsoft Entra ID, or comparable directory and identity services. Foundational understanding of SSO, MFA, privileged access, and security controls related to access management. Ability to document work accurately, manage competing priorities, protect sensitive information, and collaborate across technical and business teams. Strong communication, analytical, customer service, and troubleshooting skills. Preferred Qualifications Operational experience with Ping Identity, SailPoint IdentityIQ, Delinea P