Overview
We are seeking a strategic and execution-focused Head of IAM Governance, Risk & Operations to lead and modernize Identity & Access Management Governance, Risk and Operations program.
This role extends beyond traditional IAM to include next-generation identity challenges, including AI agents, non-human identities, and autonomous systems. You will define how identity is governed in an era where agentic AI act with delegated authority.
Grounded in balancing power, control, and alignment—you will ensure identity systems are secure by design, governed with intent, and constrained by policy, preventing uncontrolled privilege expansion across both human and machine actors.
Key Responsibilities
IAM Governance & Strategy
- Define and implement a modern IAM governance framework spanning:
- Human identities
- Machine/service identities/ AI agents and autonomous actors
- Establish policies and standards based on global regulations
- Lead governance forums to ensure accountability across technology, security, and business domains
- Partner with data governance to align identity controls with data sensitivity and usage
Agentic AI Identity & Governance
- Define and operationalize identity frameworks for agentic AI, including:
- Unique identity issuance for AI agents
- Scoped permissions and task-based entitlements
- Lifecycle management (creation, delegation, revocation, termination)
- Establish policy guardrails for autonomous decision-making systems, ensuring:
- Traceability of actions
- Attribution of decisions
- Controlled delegation of authority
- Implement controls to prevent:
- Privilege escalation by AI agents
- Unauthorized data access or propagation
- Identity sprawl across machine and AI ecosystems
- Partner with AI/ML teams to integrate IAM into AI pipelines, orchestration layers, and model execution environments
Risk & Compliance
- Own IAM risk identification across human and non-human identities.
- Define risk models for autonomous access, delegated authority, and machine-to-machine interactions
- Ensure compliance with evolving regulatory expectations related to AI governance and identity accountability
- Lead audit readiness for IAM and AI identity controls
- Develop KPIs/KRIs for:
- Identity risk exposure
- Access anomalies (human vs. agentic)
- Policy violations and drift
Operations & Execution
- Oversee IAM operations across:
- Joiner/Mover/Leaver (JML) lifecycle
- Access certifications and continuous attestation
- Privileged Access Management (PAM)
- Authentication and authorization services
- Implement access controls (adaptive, context-aware, risk-based)
- Ensure operational scalability as identity volumes grow exponentially with AI adoption
Leadership & Stakeholder Engagement
- Build and lead a forward-looking IAM organization capable of supporting AI-era identity challenges
- Partner with:
- Risk
- Data Governance
- AI/ML Engineering
- Enterprise Architecture
- Translate complex identity and AI risk concepts into clear executive narratives
- Establish a culture of accountability, transparency, and controlled innovation
Qualifications
Required
- 12+ years in cybersecurity/IAM with 5+ years in senior leadership roles
- Deep expertise in:
- Identity Governance & Administration (IGA)
- Privileged Access Management (PAM)
- Authentication and access control
- Proven experience managing IAM in complex, highly regulated environments
- Strong understanding of non-human identities.
- Demonstrated ability to design governance models, not just operate within them
Preferred
- Experience integrating IAM with AI/ML platforms or data ecosystems
- Familiarity with agentic AI frameworks and orchestration tools
- Experience with tools such as SailPoint, Saviynt, CyberArk, Okta, and cloud IAM platforms
- Anthropic Mythos Leadership and Assessment.
What Success Looks Like
- A unified IAM framework governing humans, machines (Including AI)
- High audit readiness across both IAM and emerging AI governance domains
- Scalable, automated IAM operations aligned to enterprise growth and innovation
Salary Range:
$205,700 - 360,100 USD
Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.
