Job Opportunities API

Position Overview We are   seeking   a strategic and transformational Director of Identity & Access Management (IAM) to lead the evolution of our global identity security program in a modern, AI-enabled enterprise environment. This leader will oversee the design, governance, and operation of identity services across workforce, customer, partner, machine, and AI-agent ecosystems. The Director of Identity Governance   and   Privileged Access   will   lead   the modernization of enterprise identity and access management   at Asurion . This role owns strategy, roadmap, governance, control design, and execution oversight across identity lifecycle management, access governance, privileged access, access reviews, non-human identity governance, and identity-related risk reduction. The leader will drive the transition from SailPoint   on-premise   to SailPoint Identity Security Cloud, mature Cyber Ark Privileged Access Management, and provide enterprise governance for federation and identity assertion practices (e.g., Ping Identity/PingFederate). Operating as a senior, hands-on strategist and program leader, the Director partners closely with HR, IT, Security Operations, Cloud/DevOps, application owners, and GRC to deliver measurable risk reduction and sustainable IAM capabilities aligned to business priorities. Key Responsibilities • Identity Governance and SailPoint Transformation • Own enterprise identity governance strategy and lead migration from SailPoint   on-premise   to SailPoint Identity Security Cloud. • Develop and execute the SailPoint cloud roadmap, including migration sequencing, integrations, operating model, stakeholder engagement, and post-migration optimization. • Strengthen joiner/mover/leaver processes to ensure   timely   and complete provisioning, deprovisioning, access changes, and termination processing. • Expand SailPoint coverage across core systems, SaaS, cloud platforms, non-integrated and high-risk applications. • Establish identity lifecycle assurance controls for provisioning accuracy, workflow failure handling, and manual access oversight. • Design risk-based access certification programs with campaign governance, remediation tracking,   evidence   retention, and escalation. • Improve   entitlement   governance by rationalizing roles, birthright access, privileged entitlements, toxic combinations, and excessive access. • Define and implement Segregation of Duties policies, control mappings, exceptions, and periodic validation. • Privileged Access Management and CyberArk Maturity • Own enterprise PAM strategy and CyberArk maturity roadmap. • Expand CyberArk coverage across infrastructure, directories, cloud, databases, applications, service and admin accounts, and emergency access paths. • Lead privileged account discovery, onboarding prioritization, credential rotation, safe design, platform integrations, session recording, and privileged access reviews. • Reduce standing privilege through time-bound and just-in-time models with strong approval and monitoring. • Operationalize privileged access policies for ownership, approvals, break-glass governance, session monitoring, password rotation, and exception   expiration . • Partner with Security Operations to enhance detection and monitoring for privileged misuse and anomalous admin behavior. • Define and track PAM KPIs/KRIs, including coverage, rotation compliance, standing privilege reduction, session recording, and onboarding progress. • Authentication, Federation, and Identity Assertion Governance • Provide enterprise governance over federation and identity assertion (Ping Identity/PingFederate, SAML, OIDC, OAuth), including certificate and token management. • Set standards, control requirements, and checkpoints for federated access in partnership with platform owners. • Establish requirements for secure configurations, token lifetime, claim governance, assertion validation, and application onboarding. • Influence architecture and engineering teams to align federation patterns with security requirements. • Support risk-based authentication standards (MFA, contextual controls, privileged   user   and remote access). • Non-Human Identity and Service Account Governance • Develop governance for service accounts, machine identities, API credentials, secrets, certificates, and cloud workload identities. • Define ownership, lifecycle, rotation, monitoring, review, and decommissioning requirements. • Establish governance frameworks for AI-enabled systems, autonomous agents, and machine-driven workflows. • Partner with Cloud, DevOps, Infrastructure, Application Engineering, and CyberArk teams to reduce unmanaged service accounts and increase visibility. • Implement risk-based recertification focusing on privileged, internet-facing, sensitive data, and critical environments. • Access Risk, Policy, and Exception Governance • Create centralized IAM exception governance for deviations, manual access, privileged and federation exceptions, and legacy integrations. • Define approval, business justification,   expiration , compensating controls, risk acceptance, and recurring review criteria. • Align identity controls with policy, audit, regulatory, and contractual obligations in partnership with GRC, Legal, Compliance, HR, and IT. • Translate IAM risks for executive reporting, including residual risk, orphaned accounts, review findings, lifecycle failures, and authentication gaps. • Support enterprise policy updates across identity lifecycle, access governance, PAM, authentication, federation,   SoD , service accounts, and reviews. • Metrics, Reporting, and Continuous Improvement • Define and   maintain   an IAM metrics framework aligned to enterprise cyber risk priorities and NIST CSF outcomes. • Deliver dashboards for SailPoint migration progress, onboarding, access review completion, deprovisioning timeliness, orphaned accounts, PAM coverage, exceptions, and service account governance. • Use metrics to drive prioritization, executive decisions, audit readiness, and continuous improvement. • Establish a repeatable process to track and close remediation actions from audits, incidents, reviews, penetration tests, and control failures. • Develop a multi-year IAM maturity roadmap aligned to cybersecurity strategy, business priorities, and risk reduction. Education and Experience • Bachelor’s degree in Information Security , Computer Science, Information Systems, or related field; advanced degree preferred. • 10+ years of progressive experience in Identity and Access Management, including 5+ years leading enterprise IAM programs. • Demonstrated leadership of SailPoint   IdentityIQ   or Identity Security Cloud migrations and large-scale IGA deployments. • Hands-on leadership maturing CyberArk or equivalent PAM platforms across hybrid environments. • Experience governing federation and modern authentication (Ping Identity/PingFederate, SAML, OIDC, OAuth). • Proven   track record   building IAM operating models, controls, metrics, and executive reporting. • Successful delivery of risk reduction outcomes in complex, regulated, or global organizations. Knowledge, Skills, and Abilities • Deep   expertise   in identity lifecycle, access governance, role and entitlement modeling,   SoD , and certification design. • Strong understanding of PAM principles, just-in-time access, session monitoring, credential rotation, and privilege reduction. • Knowledge of non-human identity governance, secrets management, API credentials, and   certificate   lifecycle management. • Familiarity with NIST CSF, regulatory expectations, audit practices, and control frameworks relevant to IAM. • Familiarity with AI/LLM governance and identity controls for AI-enabled platforms. • Ability to translate technical risk into business terms and influence senior stakeholders. • Program and change management skills to lead cross-functional migrations and operating model transitions. • Excellent communication, stakeholder engagement, and vendor/partner management skills. Travel Requirements N/A Physical Demands • Stationary Position: Frequently • Vision: 20/20 corrected vision • Hearing: Receive detailed information if spoken to Working Conditions