Position Overview
The Lead for Privileged Access Management (PAM) Services is responsible for designing, governing, and executing a firmwide strategy for securing and managing privileged access across all applications, platforms, and environments. This role provides direct leadership of the PAM engineering and operations team, with accountability for strategic alignment, operational execution, and lifecycle governance of privileged access services. The ideal candidate will drive the implementation of standardized access models, ensure effective deployment of CyberArk and related PAM technologies, and lead the closure of regulatory findings and audit gaps. The ideal candidate brings deep technical expertise, a strong command of regulatory expectations, and proven experience scaling PAM capabilities in complex environments. This role is essential to reducing risk, enabling automation, and delivering sustainable compliance across the enterprise.
Key Responsibilities
Strategic Leadership
- Develop and execute a multiyear PAM roadmap aligned with enterprise risk, audit remediation plans, and platform capabilities.
- Lead the development of strategic access models per platform and ensure integration into IAM and security architecture.
- Act as the PAM SME to executive stakeholders, internal audit, and regulators.
Operational Execution and Team Leadership
- Lead, mentor, and develop the PAM engineering and operations team, ensuring clear accountability, role clarity, and alignment with strategic goals.
- Ensure effective workload prioritization, issue resolution, and delivery against service-level commitments.
- Manage day-to-day execution of privileged account onboarding, session monitoring & verification, password rotation, and exception handling.
- Implement and enforce access models for each platform (Unix, Windows, Network, DB, etc.).
- Drive integration of PAM with SailPoint and Splunk to enable end-to-end automation and visibility.
- Drive continuous improvement in engineering, operations, and user experience across the PAM lifecycle
Compliance and Control
- Own remediation of PAM-related audit findings, including gaps in privileged account discovery, validation, and process consistency.
- Define and enforce controls for break-glass and emergency access and implement compensating controls where needed.
- Ensure quarterly privileged access reviews are automated, complete, and audit-ready.
- Collaborate with GRC and Internal Audit to define KRIs/KPIs to measure control effectiveness and operational performance.
Cross-Functional Engagement
- Partner with Infrastructure, Application, and Cybersecurity teams to operationalize PAM controls in alignment with platform and business needs.
- Collaborate with GRC and Internal Audit teams to define policy requirements and ensure control effectiveness.
- Manage vendor partnerships supporting PAM delivery, while ensuring in-house capability ownership and quality.
- Participate in architecture reviews to ensure PAM integration in all new projects.
Required Qualifications
- 10+ years in Identity and Access Management or Information Security, with 5+ years in a dedicated PAM role.
- Deep experience with CyberArk, SailPoint, Splunk and other relevant IAM technologies
- Proven success in remediating regulatory or audit findings related to privileged access.
- Strong understanding of Unix/Linux, Windows, Active Directory, cloud platforms (AWS/Azure), and databases from a privileged access perspective.
- Experience in implementing Just-In-Time access, session monitoring & verification frameworks, and access models across platforms.
- Experience leading privileged access onboarding at scale, including custom applications.
- Strong familiarity with control frameworks including NIST CSF 2.0 and CRI
Preferred Qualifications
- CISSP, CISM, or relevant cybersecurity certification.
- Experience working in regulated financial environments.
The expected base salary ranges from $200k-$275k. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications and licenses obtained. Market and organizational factors are also considered. In addition to salary and a generous employee benefits package, successful candidates are eligible to receive a discretionary bonus.
#LI-Hybrid
Other requirements
Mizuho has in place a hybrid working program, with varying opportunities for remote work depending on the nature of the role, needs of your department, as well as local laws and regulatory obligations. Roles in some of our departments have greater in-office requirements that will be communicated to you as part of the recruitment process.
