Bachelor's Degree in Information Security or Computer Science preferred (other majors considered)
Typically a minimum of 10 years of related professional experience
Prefer a minimum of 5-6 years of experience in a managerial position
Excellent leadership and people management skills, with the ability to build and motivate high-performing teams
Strong analytical and problem-solving skills, with the ability to make sound decisions in complex and fast-paced environments
Excellent communication and interpersonal skills to promote security across diverse teams
Exceptional communication and stakeholder management skills, with the ability to effectively interact with executives and technical teams
Preferred: 5-7 years IAM experience for Financial services or other highly regulated industry
Preferred: 2-3 years experience in a Sr IAM Leadership role with responsibility for delivering capabilities or tools
Firm understanding of RBAC Development, processes and Controls
Strong understanding of PCI, SOX, HIPAA, EU-GDPR regulations for IAM
Responsibilities
Manages user identity and access administration by maintaining user security access rules and profiles and defining security access rights
Implements necessary access management controls to protect information systems assets from intentional or inadvertent access, modification, disclosure, or destruction
Maintains access to information security technologies
Coordinates the delivery of identity and access management services in response to evolving business needs
Conducts regular review of identity and access management principles and standards and develops communication plans to promote access management solutions
Builds, oversees, and maintains an enterprise Identity and Access Management engineering program aligned with business, technology, and security goals
Contributes to the development of identity and access management strategy and translates defined strategy to actionable roadmap
Collaborates with internal stakeholders and external vendors to ensure services and solutions are robust and scalable to support business and client needs
Educates the enterprise on identity and access management best practices and shares emerging authentication techniques and technologies
Identifies and explores new initiatives to enhance the security and performance of the identity and access management environment
Identifies, evaluates, and mitigates security risks and vulnerabilities in Identity and Access Management systems and infrastructure
Supports identity and access management security incident response activities from detection to resolution, including post-incident analysis and lessons learned
Develops and maintains metrics to monitor and report on the effectiveness of identity and access management controls, processes, and measures the performance of the program
Builds and prepares updates and/or reports to advise senior leadership on security posture, issues and risks, and overall state of the program
Stays updated on emerging threats, vulnerabilities, and industry trends, and proactively recommends and implements appropriate security measures
Ensures compliance with regulatory requirements, industry standards, and best practices, such as NIST, PCI, and SOC