Security Manager Senior, Identity Controls Governance

Position Summary: The Manager, Identity Controls Governance will provide leadership and oversight for enterprise Identity and Access Management (IAM) controls, helping ensure access is appropriately governed, risk-based, and aligned with business, cybersecurity, and regulatory requirements.

Key Responsibilities: Provide governance and oversight for Identity Governance and Administration (IGA) and Privileged Access Management (PAM) controls. Lead identity lifecycle, access certification, Segregation of Duties (SoD), privileged access governance, and risk-based access control activities. Establish effective governance across workforce, third-party, privileged, service, machine, and other non-human identities. Monitor identity control effectiveness, identify control gaps and risks, and coordinate remediation with accountable stakeholders. Support regulatory compliance, audit readiness, risk assessments, and control testing activities. Partner across Cybersecurity, Technology, Risk, Audit, Compliance, and business functions to strengthen identity controls while supporting business objectives. Develop metrics and reporting that provide visibility into identity risk, control effectiveness, and remediation progress. Promote continuous improvement and automation of identity governance and control processes.

Qualifications: Experience in Identity and Access Management, cybersecurity, technology risk, or controls governance within a complex enterprise environment. Strong knowledge of IGA, PAM, identity lifecycle management, access certification, SoD, privileged access, and access control concepts. Demonstrated experience leading cross-functional initiatives and driving complex programs from strategy through execution. Understanding of cybersecurity risk management, regulatory compliance, audit, and control effectiveness. Strong communication, leadership, problem-solving, and stakeholder management skills. Preferred

Experience: Experience within a large, highly regulated financial services or Fortune 100 environment. Experience with enterprise identity technologies such as SailPoint, Saviynt, CyberArk, or Microsoft Entra ID Governance. Knowledge of Zero Trust, NIST Cybersecurity Framework, NIST SP 800-53, and related security and controls frameworks. Experience governing emerging identity types, including service accounts, machine identities, workloads, and AI/agent identities. Relevant professional certifications such as CISSP, CISM, CRISC, or CISA.