Information Security Manager - Identity and Access Management (IAM)
Core
Lead the enterprise Identity & Access Management (IAM) program, covering identity governance, access lifecycle management, privileged access management (PAM), and authentication architecture across enterprise applications, cloud infrastructure, and hybrid environments.
Role type
Senior IC Information Security Manager (IAM)
Builds
Enterprise IAM roadmap, identity policies, automated provisioning/de-provisioning workflows, SSO/MFA/PAM implementations, and access certification campaigns.
Domain
Cybersecurity, Identity & Access Management, Cloud Security
Required skills
IAM strategy definition, RBAC/ABAC/Least Privilege/SoD governance, JML process automation, SSO/MFA/SAML/OIDC architecture, PAM solution management, IGA program direction, audit remediation, incident response, vendor management
Preferred skills
CISSP/CISM/CISA certification, AWS/Azure/GCP cloud identity management, scripting/automation (PowerShell/Python/REST APIs)
Technologies
Microsoft Entra ID, Okta, Ping Identity, Active Directory, SailPoint, Saviynt, CyberArk, BeyondTrust, Delinea, HashiCorp Vault, OAuth 2.0, SAML, OIDC, SCIM, Kerberos, LDAP
Responsibilities
Lead the definition and execution of the enterprise IAM roadmap; Develop and enforce identity policies including RBAC and ABAC; Lead, mentor, and build a high-performing team of IAM engineers and analysts; Oversee Joiner, Mover, and Leaver (JML) processes for automated provisioning; Architect and oversee modern authentication standards including SSO and MFA; Manage enterprise PAM solution implementation; Direct user access reviews and entitlement certification campaigns; Function as primary IAM lead for internal and external audits; Act as escalation point for identity-focused security incidents; Evaluate and manage third-party IAM software vendors
Seniority
Senior, hands-on IC with management responsibilities