Location: Hershey, PA
How will you fit in the big picture?This is a unique opportunity to lead the evolution of Hershey's enterprise Privileged Access Management (PAM) program and help protect the company's most critical systems, credentials, and privileged access pathways.
As a strategic leader within the Identity and Access Management (IAM) organization, you will define and execute the vision, roadmap, and operating model for Hershey's PAM capability. You will drive initiatives that strengthen privileged access controls, support Zero Trust objectives, improve operational maturity, and reduce enterprise security risk across a complex global environment.
Working closely with Information Security, infrastructure, application, cloud, audit, compliance, and business teams, you will lead the full PAM lifecycle from strategy and prioritization through implementation, adoption, measurement, and continuous improvement. This role also provides the opportunity to lead and influence managed service providers, offshore operations, and cross-functional project teams while delivering enterprise-wide security outcomes.
What will you do?- Define, enhance, and execute the enterprise PAM strategy, roadmap, governance model, and operating standards.
- Lead PAM program planning, prioritization, risk management, resource coordination, and delivery.
- Partner with infrastructure, cloud, application, security, audit, compliance, and business teams to prioritize PAM onboarding and adoption based on risk and business impact.
- Manage the full privileged account lifecycle, including discovery, onboarding, credential vaulting, rotation, access reviews, session monitoring, and decommissioning.
- Expand PAM coverage across administrator accounts, service accounts, application accounts, APIs, secrets, automation credentials, and cloud privileged access.
- Oversee PAM platform operations, vendor relationships, managed service delivery, incident support, and overall program performance.
- Establish metrics, reporting, adoption indicators, and control effectiveness measures to demonstrate risk reduction and program maturity.
- Drive automation, process simplification, operational efficiency, and user experience improvements while maintaining strong security controls.
- Support audits, control testing, investigations, remediation activities, and evidence collection.
- Provide leadership and direction to internal resources, managed service partners, and cross-functional project teams.
Minimum Education & RequirementsMinimum RequirementsExperience:- Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field; equivalent experience may be considered.
- 5+ years of experience in information technology, cybersecurity, identity and access management, security operations, security architecture, or security governance.
- 3+ years of experience supporting, implementing, operating, or leading Privileged Access Management capabilities.
- 3+ years of experience leading cross-functional initiatives, technical teams, managed service providers, or partner resources.
- Experience partnering with infrastructure, application, cloud, audit, compliance, security operations, and business stakeholders.
- Experience supporting audit activities, control testing, remediation tracking, evidence collection, and reporting.
- Strong knowledge of privileged account lifecycle management, credential vaulting, session monitoring, access reviews, secrets management, and privileged risk reduction.
- Proven ability to influence stakeholders, prioritize workstreams, drive accountability, and deliver measurable outcomes in a complex enterprise environment.
Education:- Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related discipline; equivalent experience may be considered.
Preferred Qualifications:- Experience with CyberArk, BeyondTrust, Delinea, HashiCorp Vault, or similar PAM and secrets management platforms.
- Experience integrating PAM solutions with Active Directory, Microsoft Entra ID, SailPoint, ServiceNow, SIEM/SOC tools, cloud platforms, and endpoint privilege management solutions.
- Experience with PowerShell, Python, Java, or similar scripting and automation tools.
- Knowledge of Windows/Linux administration, networking, firewalls, VPNs, DNS, databases, application servers, and secure configuration practices.
- Experience developing PAM metrics, dashboards, reporting, and maturity roadmaps.
- Relevant certifications such as CISSP, CISM, CRISC, Security+, CyberArk, BeyondTrust, Delinea, HashiCorp, Azure, or AWS.
Benefits and PerksAt Hershey, we offer competitive pay and a comprehensive total rewards package designed to support your wellbeing, financial security, and life outside of work.
- Health & Wellbeing: Medical, dental, and vision coverage, plus wellness programs that support your physical and mental health.
- Financial Security: Competitive pay, annual incentive opportunities, and a 401(k) with company match.
- Time Off & Flexibility: Paid time off, company holidays, and flexible ways of working where applicable.
- Growth & Development: Career development programs, learning opportunities, and internal mobility.
#LI-KR1
#LI-Onsite
