HIH - Information Protection Senior Analyst-HIH

Evernorth Health Services India, established in Hyderabad in 2024, is an innovation hub for Evernorth Health Services, the pharmacy, care and benefits division of The Cigna Group. The innovation hub will support innovation-focused areas, such as generative AI, product development, process improvement, analytics, and software engineering across The Cigna Group and its businesses. Evernorth Health Services India builds on The Cigna Group’s existing presence in India.

About Evernorth Health Services:

Evernorth Health Services (Evernorth) is the pharmacy, care and benefits solution division of The Cigna Group - a Fortune 16 global health company with 75,000 employees, 186 million customers in more than 30 countries and jurisdictions around the world. Evernorth exists to make the prediction, prevention, and treatment of illness and disease more accessible to millions of people. We do this by creating and connecting premier health services offerings, such as benefits management, pharmacy, care solutions, insights and intelligence.

About Cigna:

The Cigna Group is a global health company committed to improving the health and vitality of individuals and communities around the world and includes products and services marketed under its Cigna Healthcare and Evernorth Health Services subsidiaries. Cigna Healthcare is the health benefits provider of The Cigna Group, serving customers and clients through its U.S. Employer, U.S. Government, and International Health business. Evernorth Health Services is the pharmacy, care and benefits solution division of The Cigna Group.

Information Protection Senior Analyst

Identity & Access Management (IAM)

Focus Area: User Access Review Lifecycle, Identity Governance, Entitlement Management & Compliance

The Information Protection Senior Analyst supports Identity Governance operations by executing and validating Identity & Access Management (IAM) controls across the enterprise. This role is heavily involved in the User Access Review (UAR) Lifecycle, Entitlement Management, and audit‑driven access governance processes. The analyst ensures precise, consistent execution of IAM controls that support least‑privilege enforcement and meet SOX, SOC1/SOC2, HIPAA, and internal audit expectations

1. 1. Execute User Access Review Lifecycle

< >Perform end‑to‑end Identity Access Reviews across in‑scope applications.Validate review inputs and outputs to ensure accuracy, completeness, and alignment with least‑privilege principles. Support manager certification processes, including follow‑ups and timely review completion.Analyze user access anomalies and collaborate with application teams to drive remediation.Consolidate and deliver audit‑ready evidence to internal or external auditors. Conduct entitlement list validation by collecting and confirming accurate entitlement evidence from application owners.Maintain entitlement inventories supporting quarterly and semi‑annual access review cycles.Ensure IAM controls meet SOX, SOC1/SOC2, HIPAA, and internal audit requirements. Create, review, and maintain audit documentation supporting UAR and entitlement controls.Identify control gaps and partner with IAM leadership to develop remediation plans.Support zero‑finding compliance posture through strict adherence to standardized review practices.Use IAM platforms (e.g., Saviynt) to execute access reviews, analyze access data, and validate entitlements.Leverage Excel for data quality checks, pivoting, reconciliation, and analysis of large datasets.(If applicable) Use basic SQL or other analysis tools to support completeness and accuracy of review data.
Work with application teams, IAM engineering, compliance partners, and business stakeholders to resolve access issues and align control execution.Communicate review outcomes, deficiencies, and required corrective actions in clear, professional language.

Support process improvements and operational enhancements within IAM governance workflows.

Education:

Bachelor’s degree and equivalent experience required

Experience:

3-5 years of experience1–3+ years of experience in Identity & Access Management, Information Security, or related technical fields.

Required Skills:

< >Advanced Microsoft Excel skills, including pivot tables, complex formulas, large‑dataset handling, and data validation.Strong understanding of IAM concepts: entitlements, least‑privilege, certification workflows.Ability to interpret technical access data and communicate it to non‑technical audiences.Familiarity with compliance frameworks (SOX, SOC1/SOC2, HIPAA) and audit expectations.Experience with IAM tools such as Saviynt (preferred).Exposure to SQL for data validation or reporting. Prior experience in Privileged Access Management (PAM) or application access onboarding.

Success Measures

< >Accurate, high‑quality execution of each review cycle with minimal data defects.On‑time completion of all UAR and entitlement review tasks.High standard of audit readiness, demonstrated by complete, well‑organized evidence packages.Maintain a 99.999% audit success rate with zero compliance findings, supporting enterprise audit objectives.Positive feedback from IAM leaders, auditors, and application partners on review accuracy and responsiveness.

Equal Opportunity Statement

Evernorth is an Equal Opportunity Employer actively encouraging and supporting organization-wide involvement of staff in diversity, equity, and inclusion efforts to educate, inform and advance both internal practices and external work with diverse client populations.