At Regions, the Identity and Access Management (IAM) Manager leads a diverse team of engineers, analysts, and administrators in implementing IAM best practices across the enterprise and ensures operating systems are secure. This position strives to increase efficiency and improve IAM capabilities for the organization. Additionally, this position continuously improves, designs, develops, implements, and monitors appropriate metrics to maintain quality and efficiency.

Primary Responsibilities

• Manages a group of analysts, engineers, or administrators to help support the IAM, Mainframe or Operation Systems teams within the Information Security function
• Develops and maintains Information Security standards related to Identity & Access Management
• Ensures all processes are documented appropriately
• Works closely with Risk/Audit partners to meet all compliance objectives as they relate to access management
• Develops Key Risk Indicators (KRI's) and Key Performance Indicators (KPI's) to ensure operational effectiveness
• Identifies opportunities for improvement in the IAM processes and systems
• Plans, estimates, staffs, organizes and monitors significant project activities
• Provides clear and effective communication with all levels of the organization
• Fosters an inclusive, collaborative environment within the team, with Enterprise Architects, Infrastructure, Support and with other IT teams
• Identifies problematic areas and implements strategic solutions
• Serves as primary escalation point for IAM-related issues and provides solutions
• Manages the teams through recruiting, training, coaching, communicating job expectations and appraising associate performance
• Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored to strengthen risk management, compliance, and cyber security, effectively mitigating risk to levels within the companys risk appetite
• Ensures disciplined change management by evaluating risk and control impacts when designing or implementing changes to processes, systems, products, and/or services

This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

This position is incentive eligible.

Requirements

• Bachelor's degree in a related field and six (6) years of related experience
• Two (2) years of lead or supervisory/managerial experience

Preferences

• Basic understanding of UNIX security, as it relates to user access and provisioning
• Experience managing Information Technology and/or Information Security projects
• Experience with Agile methodology
• Experience with PowerBI/Tableau for reporting projects
• Good understanding of network and infrastructure (Networking protocol knowledge is an advantage- TCP/IP, HTTP, HTTPS, DNS, firewalls, proxies, IDS, IPS etc
• Recognized security industry certifications preferred (CISSP, CAP, etc.)
• Significant knowledge of Active Directory security, as it relates to user access and provisioning

Skills and Competencies

• Ability to be broadly focused and manage multiple efforts concurrently
• Ability to work effectively to build relationships with colleagues, application owners, and executive management through positive interaction
• Ability to multi-task, to be self-initiated, and work independently
• Demonstrate planning and project management skills
• Excellent customer service and interpersonal skills
• Proactive, decisive, action-oriented individual
• Proven ability to set technology strategy
• Strong attention to detail and outstanding analytical skills
• Strong organizational skills
• Strong written and verbal communication skills
• Understanding of and ability to interpret applicable rules, regulations, and industry guidance

Additional Responsibiltiies:

• Oversee administration and optimization of enterprise secrets platforms (HashiCorp Vault and CyberArk), ensuring high availability, scalability, and resilience
• Drive automation of secrets and vault operations (onboarding, provisioning, lifecycle management) through CI/CD pipelines, infrastructure-as-code, and DevSecOps best practices
• Lead the expansion and maturation of enterprise secrets capabilities, promoting adoption of automated password and secrets management to eliminate manual processes and static credentials
• Partner with application, platform, and security teams to onboard services and scale secure secrets workflows across multi-cloud and on-prem environments, establishing standards for access, rotation, and usage
• Build and lead a high-performing team with strong cloud, DevSecOps, and platform engineering expertise, providing technical leadership aligned to IAM strategy and modern security practices

Preferred Qualifications:

• Hands-on experience leading and scaling enterprise secrets management platforms, including HashiCorp Vault and/or CyberArk, with responsibility for platform availability, resiliency, performance optimization, and operational excellence.
• Demonstrated expertise in DevSecOps, automation, and infrastructure-as-code practices, including the implementation of automated secrets lifecycle management, and CI/CD integration
• Experience driving enterprise-wide adoption of privileged access and secrets management capabilities across multi-cloud and hybrid environments, establishing standards for credential rotation, machine identity management, secure application onboarding, and secrets governance.
• Proven leadership in building and developing high-performing engineering teams with expertise in cloud security, platform engineering, and identity technologies, while partnering effectively with application, infrastructure, and cybersecurity stakeholders to deliver strategic IAM outcomes.

This position is intended to be onsite, now or in the near future. Associates will have regular work hours, including full days in the office three or more days a week. The manager will set the work schedule for this position, including in-office expectations. Regions will not provide relocation assistance for this position, and relocation would be at your expense. The locations available for this role are Birmingham, AL, Atlanta, GA, Nashville, TN, or Charlotte, NC.

Regions will not sponsor applicants for work visas for this position at this time. Applicants for this position must currently be authorized to work in the United States on a full-time basis.

Position Type

Compensation Details

Pay ranges are job specific and are provided as a point-of-market reference for compensation decisions. Other factors which directly impact pay for individual associates include: experience, skills, knowledge, contribution, job location and, most importantly, performance in the job role. As these factors vary by individuals, pay will also vary among individual associates within the same job.

The target information listed below is based on the Metropolitan Statistical Area Market Range for where the position is located and level of the position.

Job Range Target:

Minimum:

Median:

Incentive Pay Plans:

Benefits Information

Regions offers a benefits package that is flexible, comprehensive and recognizes that 4;one size does not fit all4; for Listed below is a synopsis of the benefits offered by Regions for informational purposes, which is not intended to be a complete summary of plan terms and conditions.

• Paid Vacation/Sick Time

• 401K with Company Match

• Medical, Dental and Vision Benefits

• Disability Benefits

• Health Savings Account

• Flexible Spending Account

• Life Insurance

• Parental Leave

• Employee Assistance Program

• Associate Volunteer Program

Please note, benefits and plans may be changed, amended, or terminated with respect to all or any class of associate at any time. To learn more about Regions benefits, please click or copy the link below to your browser.

Job applications at Regions are accepted electronically through our career site for a minimum of five business days from the date of posting. Job postings for higher-volume positions may remain active for longer than the minimum period due to business need and may be closed at any time thereafter at the discretion of the company.