Position Summary
The Senior Principal, Identity & Access Management (IAM) Strategy & Product Management, is responsible for defining, driving, and executing the strategic vision, product roadmap, and governance framework for the organization's IAM capabilities. This role serves as a senior subject matter expert and strategic advisor, partnering with cyber security leadership, technology teams, business stakeholders, risk, compliance, and audit functions to advance the maturity, effectiveness, and adoption of IAM services across the enterprise.
The successful candidate will lead strategic planning, product management, capability development, and transformation initiatives across key IAM domains, including Identity Governance & Administration (IGA), Privileged Access Management (PAM), Access Controls, Authentication, Authorization, Directory Services, and Emerging Identity Technologies. This role will drive innovation, establish performance measures, and ensure IAM capabilities align with business objectives, regulatory requirements, and industry best practices.
Key Responsibilities
IAM Strategy & Vision
- Define and maintain the multi-year IAM strategy, roadmap, and capability maturity plan.
- Partner with senior business and technology leaders to align IAM priorities with enterprise objectives and cyber security priorities.
- Identify emerging identity and security trends, technologies, and industry best practices to inform strategic direction.
- Provide thought leadership on IAM transformation initiatives and future-state operating models.
- Drive strategic planning activities, capability assessments, and roadmap prioritization.
Product Management & Capability Ownership
- Own product strategy and lifecycle management for assigned IAM capabilities and services.
- Define product vision, objectives, key results (OKRs), performance measures, and success criteria.
- Lead product roadmap development and prioritization activities across multiple workstreams.
- Evaluate new technologies, vendor solutions, and market opportunities to enhance IAM capabilities.
- Develop business cases, strategic recommendations, and executive presentations to support IAM priorities and roadmap decisions.
Enterprise Stakeholder Leadership
- Serve as a trusted advisor to senior leadership, engineering teams, and business stakeholders.
- Facilitate alignment across cyber security, technology, risk, compliance, and business functions.
- Lead governance forums, steering committee discussions, and strategic planning sessions.
- Influence enterprise priorities and drive adoption of IAM services and controls.
- Communicate complex technical and strategic concepts to executive audiences.
Program & Transformation Leadership
- Lead large-scale IAM transformation initiatives from strategy through delivery.
- Identify and manage dependencies, risks, and opportunities across IAM programs.
- Establish operating models, governance structures, and performance management frameworks.
- Drive continuous improvement initiatives that enhance efficiency, scalability, and security outcomes.
- Support organizational change management and adoption efforts.
Governance, Risk & Compliance
- Ensure IAM capabilities align with regulatory requirements, security policies, and control frameworks.
- Partner with audit, compliance, and risk management teams to strengthen governance processes.
- Assess IAM risk exposure and define strategies to improve control effectiveness and maturity.
- Sponsor remediation efforts for significant audit findings and control gaps.
- Champion security-by-design principles across IAM products and services.
Data Analytics & Performance Management
- Establish metrics, KPIs, KCIs, and executive reporting frameworks for IAM services.
- Drive data-informed decision making through analytics and performance monitoring.
- Present strategic insights and recommendations to executive leadership.
- Measure product success and continuously optimize service delivery.
Required Qualifications
- Bachelor's degree in Cyber Security, Information Technology, Computer Science, Engineering, Business, or a related field.
- 10-15+ years of experience in Cyber Security, Identity & Access Management, Product Management, Technology Strategy, or related disciplines.
- Extensive experience leading enterprise-scale IAM initiatives and transformation programs.
- Deep understanding of IAM architecture, operating models, governance, and industry best practices.
- Experience developing technology strategy, business cases, and executive-level presentations.
- Strong leadership, influence, negotiation, and stakeholder management skills.
- Proven ability to develop and execute strategic roadmaps and long-term plans.
- Experience working with executive leadership and cross-functional teams.
- Exceptional analytical, communication, and problem-solving abilities.
Salary Range:
$164,600 - 288,000 USD
Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.
Work Authorization
Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).
