Director / Senior Manager – Identity & Access Management (IAM)

About the role

We are looking for an experienced Identity and Access Management (IAM) leader to design, build, and steer a global IAM program within a large information security organization. The role will shape strategy, govern processes, and ensure compliance across all applications and services.

Key responsibilities

• Define and lead the enterprise IAM strategy, roadmap, and governance framework.
• Build, lead, and develop a high‑performing IAM team responsible for identity governance, administration, and access lifecycle management.
• Modernize the IAM program through automation, process optimization, and technology adoption.
• Establish and enforce IAM policies, standards, and procedures aligned with security and regulatory requirements.
• Oversee identity lifecycle processes (joiner, mover, leaver) and quarterly access certification reviews.
• Implement least‑privilege, role‑based access control (RBAC) and segregation of duties (SoD) across the enterprise.
• Manage privileged access management (PAM), single sign‑on (SSO), multi‑factor authentication (MFA) and identity governance controls.
• Partner with HR, IT, application owners, audit, legal, privacy, and compliance teams to ensure proper access governance.
• Track IAM metrics, KPIs, and risk indicators; drive remediation of orphaned accounts and excessive privileges.
• Evaluate, select, and implement IAM platforms such as SailPoint, Okta, Microsoft Entra ID, CyberArk, and Ping Identity.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or related field (Master’s preferred).
• 10+ years of IAM or information security experience, including 5+ years in leadership roles.
• Proven track record building and scaling enterprise IAM programs in large, global organizations.
• Deep knowledge of IAM governance, identity lifecycle management, access certification, PAM, SSO, MFA, RBAC and SoD.
• Experience ensuring compliance with SOX, ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS.

Required skills

• SailPoint
• Okta
• Microsoft Entra ID
• CyberArk
• Ping Identity
• Privileged Access Management (PAM)
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)