Director, Privileged Access Management (PAM)

Location Type: Remote Employment Type: Full-time

Company Description

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create digital marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realise their financial goals and help them to save time and money.

We operate across a range of markets, from financial services to healthcare, automotive, agrifinance, insurance, and many more industry segments. We invest in people and new advanced technologies to unlock the power of data and to innovate. A FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 23,300 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.

Position Overview

We are looking for a strategic Director, Privileged Access Management (PAM) to join our Global Security Office. This critical role will be the product manager for PAM, defining and executing our PAM strategy, overseeing the end-to-end lifecycle of PAM technologies, and ensuring the secure management of privileged accounts across the organization. The Director, PAM will strengthen our overall cybersecurity posture, working with teams to establish, enforce, and evolve our access control practices.

You will report to the Senior Director of Identity and Access Management (IAM), and this is a remote position.

Key Responsibilities & Opportunities

Strategic Leadership & Product Ownership

• Define and advocate for the PAM product vision and strategy, developing a comprehensive roadmap aligned with goals, regulatory requirements, and industry best practices.
• Serve as the capability and service manager and the primary liaison for PAM capabilities and solutions.
• Communicate the PAM strategy, roadmap, and operational status to executive leadership, technical teams, and partners.
• Stay informed about the latest trends, threats, and advancements in PAM technologies and practices.
• Identify opportunities for program enhancement and lead plans for security awareness and training related to privileged access.

Team Leadership

• Lead a high-performing team of PAM professionals, promoting a culture of innovation, accountability, and continuous improvement.
• Improve team operations through resource allocation and project prioritization to ensure successful execution.

PAM Technology and Operations

• Guide the evaluation, selection, implementation, and ongoing management of PAM solutions.
• Oversee architecture, configuration, integration, and operational efficiency to ensure performance, scalability, and adherence to security standards.

Access Control & Governance

• Define and provide clear, comprehensive requirements for privileged access controls, influencing our overarching access control standard.
• Partner with Identity Governance & Access (IGA) and other security teams to implement privileged access controls across diverse systems and applications.
• Lead the development of enterprise-wide PAM policies, standards, procedures, and guidelines, ensuring secure management of privileged accounts.
• Establish key performance indicators (KPIs) to monitor program effectiveness, identify trends, and improve.

Risk & Compliance Management

• Identify and assess risks associated with privileged access.
• Develop and implement mitigation strategies, ensuring strict compliance with relevant security policies, audit requirements, and regulatory frameworks (e.g., SOX, GDPR, HIPAA).

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 8+ years of progressive experience in Identity and Access Management, with at least 5+ years specifically focused on leading Privileged Access Management programs.
• Experience with a product management or ownership role.