Principal Analyst, Digital Security

WM, a Fortune 250 company, is the leading provider of comprehensive waste and environmental services in North America. We are strongly committed to a foundation of operating excellence, professionalism and financial strength.  WM serves nearly 25 million customers in residential, commercial, industrial and municipal markets throughout North America through a network of collection operations, transfer stations, landfills, recycling facilities and waste-based energy production projects.

  I. Job Summary

The Principal Analyst role in Cybersecurity - Identity and Access Management is a strategic, data-driven expert responsible for leading key initiatives, that enhances identity governance through metrics, controls, and strategic business partnerships. The role leads the development and reporting of identity-related KPIs and risk indicators, ensures compliance with internal controls and regulatory requirements, support audit readiness, and serves as a strategic partner to business and technical teams across the enterprise to strengthen IAM processes, support role-based access and lifecycle management, and guide continuous improvement initiatives aligned with IAM strategy.  

  II. Duties and Responsibilities

To perform this job successfully, an individual must be able to perform each duty satisfactorily.  Other ancillary duties may be assigned. 

• Serve as the SME (Subject Matter Expert) for audit and compliance controls related to IAM, including user provisioning, de-provisioning, access reviews, role-based access control (RBAC), privileged access management (PAM), and segregation of duties (SoD). 
• Create, continuously improve and enforce the standardization of IAM policies, standards, and control procedures in alignment with regulatory and industry frameworks (e.g., SOX, ISO 27001, NIST 800-53, HIPAA). 
• Stay up to date with industry trends and developments in IAM and identity governance, incorporating relevant advancements into the IAM strategy to keep the organization aligned with best practices.
• Promote the value of IAM throughout the organization by providing guidance on IAM policies and technologies. 
• Collaborate with cross functional teams to assess control gaps, risks, and remediation plans.
• Lead and support internal and external audit engagements by preparing documentation, evidence, and walkthroughs for IAM-related controls.
• Design, develop, and maintain IAM program metrics and dashboards (KPIs, KRIs) to evaluate effectiveness, detect risks, and drive improvements.
• Analyze large and complex identity data to uncover trends, anomalies, and opportunities to optimize access governance and compliance.
• Partner with IAM engineering and operations teams to influence tool enhancements, automation opportunities, and IAM maturity initiatives.
• Assist with the development and implementation IAM initiatives to ensure secure and efficient access to systems and data. 
• Maximize the value for our Identity and Access Management products, at the program level in a scaled Agile model through regular performance and security reviews of IAM systems. 

  III. Qualifications  

A. Education and Experience

Education: Bachelor's Degree (accredited) in Computer Science, MIS, Business Administration or similar area of study or in lieu of degree, High School Diploma or GED (accredited) and four years of relevant work experience.  

Experience: Seven years of prior work experience (in addition to education requirement).

B.  Certificates, Licenses, Registrations or Other Requirements

One or more of the following is required:

Certified Information Systems Security Professional (CISSP).

Certified Information Systems Auditor (CISA).

Certified Information Security Manager (CISM).

C. Other Knowledge, Skills or Abilities Required

Technically advanced or in-depth knowledge or skills in one or more of the following is required:

In-depth understanding of identity lifecycle, RBAC, entitlement management, access certification, provisioning/de-provisioning, and privileged access concepts. Proven ability to analyze large identity datasets, identify patterns, and present actionable insights through dashboards and reporting tools (e.g., Power BI, Tableau, Excel, SQL). Familiarity with IAM platforms (e.g., SailPoint, Okta, PAM), scripting languages (e.g., Python, PowerShell), and data querying and transformation techniques. Advanced Excel skills, including complex functions (e.g., VLOOKUP, INDEX-MATCH, array formulas) and automation using macros/VBA. Proven experience in IAM strategy execution and compliance, with a strong understanding of IAM governing principles. Skilled in documenting and optimizing IAM processes; experience with process improvement methodologies is a plus (e.g., Six Sigma, Lean). Excellent analytical and