Responsible for the tactical leadership, administration, and continuous improvement of the organization's Identity and Access Management (IAM) program. Oversees the team responsible for user lifecycle management, access governance, privileged access management, authentication services, and identity security controls. Ensures that access to enterprise systems, applications, and data is granted, monitored, and revoked in accordance with security policies, regulatory requirements, and business needs. Provides day-to-day management, operational oversight, and strategic guidance to the Identity Management team while supporting broader Information Security objectives.
Essential Duties & Responsibilities
- Manages the daily operations of the Identity Management function, including identity provisioning, deprovisioning, access reviews, authentication services, and privileged access controls.
- Oversees the implementation, maintenance, and support of Identity and Access Management technologies, including Active Directory, Entra ID (Azure AD), MFA, SSO, Identity Governance and Administration (IGA), and Privileged Access Management (PAM) solutions.
- Ensures timely processing of user access requests, role modifications, and termination activities in accordance with established policies and service-level expectations.
- Monitors identity-related security controls and investigates access control issues, policy violations, and unauthorized access incidents.
- Coordinates periodic user access certifications and entitlement reviews to ensure compliance with internal policies, regulatory requirements, and audit expectations.
- Partners with Information Security, Infrastructure, Application Support, Human Resources, and business units to develop and maintain role-based access models and least-privilege access standards.
- Develops and implements procedures and standards related to identity lifecycle management, authentication, authorization, and access governance.
- Evaluates IAM technologies, tools, and service providers to improve operational efficiency and strengthen security controls.
- Supports implementation of new systems and applications by ensuring appropriate identity integration, access controls, and authentication methods are incorporated during project planning and deployment.
- Maintains documentation related to IAM processes, standards, procedures, and system configurations.
- Assists in responding to internal and external audits, regulatory examinations, and security assessments involving identity and access management controls.
- Tracks departmental metrics and key performance indicators related to provisioning efficiency, access review completion, privileged account management, and authentication services.
- Keeps current with identity security trends, emerging threats, and regulatory requirements that impact IAM operations.
SUPERVISORY RESPONSIBILITIES:
Manages seven to nine employees in the Information Security department and is responsible for the overall direction, coordination, and evaluation of these units; Carries out supervisory responsibilities in accordance with the organization's policies and applicable laws. Responsibilities include interviewing, hiring, and training employees; planning, assigning, and directing work; appraising performance; rewarding and disciplining employees; addressing complaints and resolving problems; recommend staff promotions; recommend staff hires and/ or terminations; approve salary recommendations for staff.
MINIMUM REQUIRED EDUCATION, EXPERIENCE & KNOWLEDGE:
- Bachelor's degree and at least four to six years of related experience; Master's degree or equivalent and at least eight to ten years of related experience preferred; or equivalent combination of education and experience
- Experience in Identity and Access Management, Information Security, or related IT disciplines preferred
- Minimum of 3-4 years of leadership or supervisory experience preferred.
Technical Knowledge
- Strong understanding of Identity and Access Management concepts, including:
- User lifecycle management
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Role-Based Access Control (RBAC)
- Identity Governance and Administration (IGA)
- Privileged Access Management (PAM)
- Access certification and attestation processes
- Experience with Active Directory, Microsoft Entra ID (Azure AD), and enterprise IAM platforms.
- Knowledge of security frameworks and regulatory requirements relevant to financial services environments.
- Familiarity with Zero Trust security principles and modern authentication technologies.
ESSENTIAL MENTAL & PHYSICAL REQUIREMENTS:
- Ability to work under stress and meet deadlines
- Ability to operate related equipment to perform the essential job functions
- Ability to read and interpret a document if required to perform the essential job functions
- Ability to travel if required to perform the essential job functions
- Ability to lift/move/carry approximately 10 pounds if required to perform the essential job functions. If the employee is unable to lift/move/carry this weight and can be accommodated without causing the department/division an 7undue hardship8 then the employee must be accommodated; hence omitting lifting/moving/carrying as a physical requirement.
