Job Description: Change Agent - Access Management

Employment Type: Full-time

Position Overview

Become a part of our caring community and help us put health first. Do you thrive on rethinking routine? Do you crave identifying areas of opportunity to strengthen a company’s cybersecurity posture? Humana is looking for a Change Agent that can pioneer simplicity. At Humana, you will have a unique opportunity to elevate an Access Management team for a Fortune 40 company. You will have the chance to design a sustainable IAM model that influences Humana’s risk culture, reshapes Identity Governance, and fosters accountability for the adoption of good security practices.

Key Accountabilities

1. Manage Technology Compliance for TRICARE Contract (25%)

• Serve as a trusted advisor and representative of Humana Military Access Management for all projects and initiatives.
• Provide leadership to the Humana Military Access Management Team for all activities related to the TRICARE Contract Compliance requirements, Contract Changes, and requests.
• Execute the strategy to meet and exceed all Compliance requirements measured in the TRICARE Manuals.
• Ensure compliance with federal and state laws, HIPAA Security Rule, DoD, and TRICARE regulations, and Humana’s technology practices.
• Ensure IT system and organizational compliance with the NIST Department of Defense security standards and reporting of Self-Attestation and Compliance to the government.

2. Identity Governance and Administration (25%)

• Provide IAM metrics and reporting to Leadership that captures access requests, compliance, and any imperative issues.
• Partner with various IT stakeholders to track and remediate the use of privileged and system administrative accounts.
• Lead and contribute to various audits to identify non-compliance and maturity gaps.
• Elevate Identity and Access Management to limit and decrease access to sensitive data.
• Contribute to the continuous monitoring of IAM risk and assurance activities such as control ownership, risk remediation, and assessments.
• Coordinate and design a mature automated access certification program to inform and engage stakeholders.
• Conduct and remediate entitlement reassignments to identify discrepancies, redundant access rights, or outdated entitlements.
• Enhance the end-to-end user experience through the adoption of user surveys, cycle times, and strategic partnerships.

3. Collaboration and Enforcement (25%)

• Collaborate with the Enterprise Information Protection team to enforce the management of user identities, authentication, and authorization.
• Provide leadership and direction to a team responsible for ensuring access controls meet Humana and DHA security compliance requirements.
• Provide guidance and expertise to the team for all activities related to the integration of IAM solutions with various applications and systems to ensure consistent access control.
• Partner with enterprise partners for password hardening enforcements.
• Provide direction, oversight, and partnership on access-related incidents and issues.

4. Team Building and Management (25%)

• Work with team members to develop and execute action plans designed to achieve and maintain a high level of associate engagement.
• Work with HR and IT leadership to recruit talent to fill open positions.
• Provide effective team leadership by ensuring each member understands their role and expected contributions through regular 1x1 meetings and team meetings.
• Conduct performance appraisals as directed by company policy.

Use Your Skills to Make an Impact

Required Qualifications

• Our Department of Defense contract requires U.S. citizenship for this position.
• Successfully receive interim approval for government security clearance (NBIS – National Background Investigation Services).
• 5 or more years of Identity and Access Management experience.
• 3 or more years of People-Leadership and management experience.
• 4 or more years of experience developing Objectives and Key Results (OKRs) and/or Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs).
• 3 or more years of experience in executing Zero Trust.