{"id":3780506,"url":"https://alion.io/job/nelnet-iam-grc-lead","title":"IAM GRC Lead","company":{"id":15352,"name":"Nelnet","domain":"nelnet.com","url":"https://alion.io/company/nelnet","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":93,"open_postings":7,"ghost_share":0,"stale_share":0.286,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Madison, United States","Lincoln, United States","Centennial, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":".NET","optional":false},{"name":"IAM","optional":false},{"name":"SharePoint","optional":false},{"name":"SOC 2","optional":false},{"name":"C#","optional":true}],"status":"live","first_seen_at":"2026-11-04T00:00:00Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-05T17:29:25Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer, professional services company, consumer loan originator and servicer, payments processor, renewable energy solutions, and K-12 and higher education expert.For over 40 years, Nelnet has been serving its customers, associates, and communities.\nThe perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team, you're part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.\nThe IAM GRC Lead is the Identity & Access Management team’s primary point of contact and lead for audits, regulatory reviews, and third-party information requests. This role leads the team’s audit program from planning through close for annual SOC 1 and SOC 2 audits, U.S. Department of Education requirements and other third-party clients for identity systems, and due-diligence requests from banks, lenders, and other financial institution partners.Beyond answering requests, this person owns the process: building a centralized library of approved responses and evidence, standardizing how the team answers recurring questions, and reducing the time and effort engineers spend on audit work. The goal is fast, accurate, consistent answers every time. This role partners with compliance, internal audit, external audit, cyber, and others so every identity related request has one accountable owner.\nThis position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates within 30 miles of an office to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence.\nPlease note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship as security clearance is required.\nCompensation range for this role is $80,000- $110,000 annually, depending on experience.\nAudit & Request Response\nServe as the IAM team’s primary liaison and audit lead for internal audit, external auditors, compliance, and third-party risk teams during SOC 1 and SOC 2 examinations.\nLead the full IAM audit lifecycle, including planning, kickoff, fieldwork, findings, and close.\nNegotiates scope, sample sizes and timelines with auditors. Can challenge findings or exceptions that are inaccurate or out of scope.\nRun pre-audit readiness reviews and periodic control self-testing so gaps are found and fixed before auditors find them.\nReceive, triage, and track all identity-related requests, including audit PBC (Provided by Client) lists, control walkthroughs, sample requests, and follow-up questions.\nRespond to Department of Education requirements and reviews related to identity systems, authentication, and access controls, in coordination with Compliance.\nComplete security questionnaires and due-diligence requests from banks and financial institutions (e.g., SIG, CAIQ, and custom questionnaires) covering identity, authentication, provisioning, and access review practices.\nGather evidence from IAM systems and engineers, verify it is complete and accurate, and deliver it on time.\nSchedule and prepare subject matter experts for auditor walkthroughs and interviews.\nInformation Management\nBuild and maintain a centralized, version-controlled repository of IAM policies, procedures, control narratives, system diagrams, and evidence artifacts.\nMap IAM controls to relevant frameworks and requirements (SOC 1/SOC 2 Trust Services Criteria, Department of Education requirements, NIST, FFIEC, GLBA, and customer contractual obligations).\nMaintain an audit calendar tracking recurring deadlines, evidence collection windows, and request due dates.\nTrack findings, exceptions, and remediation items through to closure, hold control owners accountable to committed dates, and report status to leadership.\nProcess Efficiency & Standardization\nDevelop and maintain a library of pre-approved, standardized responses to frequently asked identity questions so answers are uniform across all audiences.\nIdentify repetitive requests and create templates, playbooks, and reusable evidence packages to shorten response time.\nPartner with IAM engineers to automate recurring evidence collection (e.g., scheduled access-review reports, user listings, configuration exports).\nEstablish review and approval workflows so responses are validated by the right owners before release.\nMeasure response times and effort, and continuously improve the process to reduce audit burden on the team.\nReview and refresh the response library annually, or whenever systems, policies, or controls change.\nRequired Qualifications\n2+ years experience in IT audit, IT compliance, GRC, or security operations, with direct involvement in SOC 1 and/or SOC 2 audits.\nDemonstrated ability to lead audit engagements and influence engineers, auditors and partners without direct authority.\nWorking knowledge of identity and access management concepts: provisioning and deprovisioning, role-based access, privileged access, multi-factor authentication, single sign-on, and user access reviews.\nExperience completing security questionnaires or vendor due-diligence requests.\nStrong written communication skills, with the ability to explain technical controls clearly and concisely to auditors and non-technical audiences.\nHighly organized, with a track record of managing many requests and deadlines at once.\nProficiency with Microsoft 365 (Excel, SharePoint, Teams) or similar collaboration tools.\nKey Competencies\nAttention to Detail: Ensures every response and piece of evidence is accurate and complete.\nProcess Improvement: Spots repetitive work and turns it into repeatable, efficient processes.\nRelationship Building: Works effectively with engineers, auditors, compliance, and external partners.\nOwnership: Drives requests to completion and follows up without being asked.\nDiscretion: Handles sensitive security information appropriately.\nInfluence: Leads auditors, engineers, and partners to outcomes without direct authority.\nSuccess Measures\nAudit and questionnaire requests completed on or before deadlines.\nReduction in average response time for recurring requests.\nPercentage of requests answered from the standardized response library.\nReduction in IAM engineer hours spent on audit support.\nNo audit findings caused by incomplete or inaccurate evidence.\nRemediation items closed by the committed date.\nPercentage of recurring evidence collected through automation.\nOur benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: Benefits & Perks - Nelnet Inc.\nNelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer, we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone.\nQualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Talent Acquisition at 402-486-5725 or .\nNelnet is a Drug Free and Tobacco Free Workplace.\nUse of Artificial Intelligence in Hiring\nWe may use automated or artificial intelligence enabled tools to assist with the initial review of applications, such as identifying relevant skills or experience. These tools are used to support human review and do not make hiring decisions. A recruiter reviews applications and determines which candidates move forward in the hiring process. For more information, see our Privacy Policy and Pre-Use Notice: Automated Tools in Hiring","description_format":"text","description_chars":8619,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Payment Processing & Gateways","Debt Collection & Recovery","Business Process Outsourcing (BPO)"],"lifecycle":[{"event":"open","at":"2026-11-05T00:46:02Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":28,"reasons":["conf:5","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/nelnet-iam-grc-lead","json_url":"https://alion.io/job/nelnet-iam-grc-lead.json","meta":{"generated_at":"2026-11-05T20:57:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":602,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":15352},"rest":"https://alion.io/mcp/rest/get_company?id=15352"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnelnet-iam-grc-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnelnet-iam-grc-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnelnet-iam-grc-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nelnet-iam-grc-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnelnet-iam-grc-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3780506}},{"tool":"search_jobs","arguments":{"company":"nelnet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3780506},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}