Director, Workforce Identity & Access Mgt, IAM Control Enablement

Job Classification:

Technology - Information Security
** Your Team & Role
** As the Director, Workforce IAM Control Enablement within IAM & Security Operations, you will own the strategy, operating model, and delivery outcomes for workforce identity controls across the enterprise. This role is accountable for scaling and modernizing Identity Governance & Administration (IGA), Privileged Access Management (PAM), and Authentication capabilities to ensure access is risk-based, data-driven, auditable, and automation-forward.

You will partner closely with Security, Technology, Application Owners, and Risk/Compliance stakeholders to drive a consistent horizontal control architecture for workforce access—improving time-to-enable, strengthening tiered controls, and raising control maturity across the enterprise.
** Here is What You Can Expect on a Typical Day
*** Partner with leadership to set direction and lead execution for workforce IAM control enablement across IGA (access requests, access reviews, entitlement registration), PAM (vaulting, session management, endpoint privilege management), and Authentication (identity verification).
* Define and drive a multi-quarter control roadmap that improves control coverage, adoption, automation, and auditability for workforce access.
* Establish and reinforce tiered identity and access control designs and standard patterns across platforms and business lines; ensure alignment to risk posture and policy requirements.
* Lead solution design for controls and operating model through program management for modernization initiatives, including schema and entitlement model design, control instrumentation, and integration patterns.
* Sponsor and guide use of core toolsets including SailPoint, Ping, Microsoft Fabric, Cyber Ark, and Hashi Corp—ensuring consistent implementation pathways and scalable onboarding.
* Drive data-driven governance: define metrics, dashboards, and evidence models to monitor compliance, control effectiveness, operational health, and onboarding throughput.
* Enable event-driven, integration-first approaches (e.g., Kafka/event streaming) to improve automation, reduce manual handling, and strengthen traceability.
* Oversee a portfolio of project and operational work; coach and develop onboarding and implementation leads while ensuring consistent delivery quality.
* Develop and implement policies and procedures related to identity and access management
* Monitor compliance trends with policies, regulations, and customer requirements related to identity and access management
* Support Post Incident Review processes related to identity and access management and recommend corrective actions
* Provide guidance and training to employees on identity and access management policies and procedures
** The Skills & Expertise You Bring
*** Bachelor's degree in Computer Science, Information Systems, or related field.
* 5+ years of experience in cybersecurity risk management, with a focus on identity and access management.
* Strong knowledge of identity and access management principles and best practices.
* Strong understanding of risk-based access control, governance models, and audit/evidence expectations in regulated environments.
* Proven ability to lead solution design for controls across identity ecosystems and operations teams
* Experience driving program execution across multiple stakeholders, including roadmap planning, dependency management, and delivery governance
* Experience developing and implementing identity and access management policies and procedures.
* Experience conducting risk assessments and developing risk management plans related to identity and access management.
* Excellent communication and interpersonal skills

Significant experience and/or deep expertise with several of the following:
* NIST and ISO 27000 Standards
* Identity and Access Management
* Identity Governance and Administration: access request workflows, access reviews/certifications, entitlement/role registration and lifecycle governance
* Privileged Access Management: vaulting, privileged session management, endpoint privilege management, onboarding patterns
* Tooling:
SailPoint, Ping, Cyber…