The Opportunity:University Operations is seeking to hire an Information Security Professional IV, Lead. This role serves as the technical and operational leader for the Identity Governance and Access Management (IGA) function within UCF's Information Security Office. This position oversees identity security operations, manages a team of security professionals, and leads enterprise-wide initiatives that govern access to university systems, applications, and data. The role provides senior-level leadership for identity lifecycle management, access governance, privileged access controls, compliance initiatives, and security improvements that reduce institutional risk while ensuring users receive appropriate access based on their roles and affiliations.
Responsibilities:Identity Governance & Access Management Leadership
- Lead the design, governance, and continuous improvement of identity governance and access management services.
- Oversee access request processes, role-based access control (RBAC), entitlement management, authorization standards, and access review programs.
- Ensure identity-related controls support security, compliance, and operational objectives.
Team Leadership & Operations
- Provide day-to-day leadership for the Identity Governance and Access Management team.
- Assign and prioritize work, review deliverables, coach and mentor staff, and support professional development.
- Ensure consistent, high-quality service delivery and operational coverage.
Identity Lifecycle & Access Control
- Serve as the senior technical lead for identity lifecycle processes, including joiner, mover, leaver, guest, affiliate, and sponsored account workflows.
- Provide direction for provisioning, de-provisioning, affiliation management, and access control enhancements.
- Promote secure, timely, and appropriate access across university systems.
Privileged Access Governance
- Provide governance and oversight for privileged accounts, service accounts, machine identities, service principals, and administrative access.
- Establish standards, review exceptions, and support audit readiness activities.
- Ensure high-risk access is appropriately approved, documented, monitored, and reviewed.
Security, Compliance & Risk Management
- Lead security design decisions related to identity and access management controls.
- Evaluate control gaps and recommend solutions that strengthen security and reduce risk.
- Align identity governance practices with institutional policies, compliance requirements, and audit expectations.
Enterprise Application Security
- Provide oversight for access models and authorization controls supporting ERP and other enterprise applications.
- Partner with business units, security teams, and technical stakeholders to improve access governance and application security.
- Help reduce over-provisioning and under-provisioning while supporting business needs.
Reporting, Audits & Continuous Improvement
- Lead reporting and analytical efforts related to identities, roles, entitlements, privileged access, and access review outcomes.
- Support internal audits, compliance reviews, and external assessments through the development of reports and evidence packages.
- Maintain policies, procedures, standards, and knowledge resources while driving continuous process improvement initiatives.
Minimum Qualifications:Bachelor's degree and 5 years of relevant experience; or High School Diploma (or equivalent) and 9 years of relevant work experience in lieu of degree or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).
Preferred Qualifications:
- Experience leading Identity Governance and Access Management (IGA) programs in a large, complex organization.
- Experience with identity lifecycle management, role-based access control, and access review processes.
- Knowledge of privileged access management (PAM), identity governance, and authorization frameworks.
- Experience supporting ERP and enterprise application security.
- Familiarity with security governance, compliance, risk management, and audit activities.
- Experience supervising or leading technical security teams.
- Strong analytical, communication, and stakeholder engagement skills.
Special Instructions to the Applicants:Position requires a valid Class E driver's license. This position may involve driving to various locations on and off campus to conduct University business.
The anticipated salary range for this position is $104,664 - $125,000. The final salary will be determined based on the candidate's qualifications, experience, and internal equity considerations.
All applicants must be authorized to work for any U.S. employer. Visa sponsorship is not available for this position, and the university cannot accommodate H-1B transfers or employment-based visa processing for individuals currently sponsored by another employer.
This role requires the successful candidate to work on-site at UCF as their primary work location. On-site presence is an essential function of this role.
Working at UCF has its perks! UCF offers:- Benefit packages, including Medical, Dental, Vision, Life Insurance, Flexible Spending, and Employee Assistance Program
- Paid time off, including annual and sick time off and paid holidays
- Retirement savings options
- Employee discounts, including tickets to many Orlando attractions
- Education assistance
- And more...For more benefits information, view the UCF Employee Benefits Guide.
Dive into our Total Rewards Calculator to discover the diverse selection available to you, giving you a glimpse into the benefits that together shape your comprehensive rewards package at UCF.
Unless explicitly stated on the job posting, it is UCF's expectation that an employee of UCF will reside in Florida as of the date the employment begins.DepartmentUCF IT Information Security Office
Work ScheduleMonday - Friday, 8:00am - 5:00pm
Type of AppointmentRegular
Expected Salary$104,664.00 to Negotiable
Job Posting End Date10-16-2026-12-00-AM
