Director, Identity and Access Management

Position Overview

We are seeking a strategic and transformational Director of Identity & Access Management (IAM) to lead the evolution of our global identity security program in a modern, AI-enabled enterprise environment. This leader will oversee the design, governance, and operation of identity services across workforce, customer, partner, machine, and AI-agent ecosystems.

The Director of Identity Governance and Privileged Access will lead the modernization of enterprise identity and access management at Asurion . This role owns strategy, roadmap, governance, control design, and execution oversight across identity lifecycle management, access governance, privileged access, access reviews, non-human identity governance, and identity-related risk reduction. The leader will drive the transition from SailPoint on-premise to SailPoint Identity Security Cloud, mature Cyber Ark Privileged Access Management, and provide enterprise governance for federation and identity assertion practices (e.g., Ping Identity/PingFederate). Operating as a senior, hands-on strategist and program leader, the Director partners closely with HR, IT, Security Operations, Cloud/DevOps, application owners, and GRC to deliver measurable risk reduction and sustainable IAM capabilities aligned to business priorities.

Key Responsibilities

• Identity Governance and SailPoint Transformation
• Own enterprise identity governance strategy and lead migration from SailPoint on-premise to SailPoint Identity Security Cloud.
• Develop and execute the SailPoint cloud roadmap, including migration sequencing, integrations, operating model, stakeholder engagement, and post-migration optimization.
• Strengthen joiner/mover/leaver processes to ensure timely and complete provisioning, deprovisioning, access changes, and termination processing.
• Expand SailPoint coverage across core systems, SaaS, cloud platforms, non-integrated and high-risk applications.
• Establish identity lifecycle assurance controls for provisioning accuracy, workflow failure handling, and manual access oversight.
• Design risk-based access certification programs with campaign governance, remediation tracking, evidence retention, and escalation.
• Improve entitlement governance by rationalizing roles, birthright access, privileged entitlements, toxic combinations, and excessive access.
• Define and implement Segregation of Duties policies, control mappings, exceptions, and periodic validation.
• Privileged Access Management and CyberArk Maturity
• Own enterprise PAM strategy and CyberArk maturity roadmap.
• Expand CyberArk coverage across infrastructure, directories, cloud, databases, applications, service and admin accounts, and emergency access paths.
• Lead privileged account discovery, onboarding prioritization, credential rotation, safe design, platform integrations, session recording, and privileged access reviews.
• Reduce standing privilege through time-bound and just-in-time models with strong approval and monitoring.
• Operationalize privileged access policies for ownership, approvals, break-glass governance, session monitoring, password rotation, and exception expiration .
• Partner with Security Operations to enhance detection and monitoring for privileged misuse and anomalous admin behavior.
• Define and track PAM KPIs/KRIs, including coverage, rotation compliance, standing privilege reduction, session recording, and onboarding progress.
• Authentication, Federation, and Identity Assertion Governance
• Provide enterprise governance over federation and identity assertion (Ping Identity/PingFederate, SAML, OIDC, OAuth), including certificate and token management.
• Set standards, control requirements, and checkpoints for federated access in partnership with platform owners.
• Establish requirements for secure configurations, token lifetime, claim governance, assertion validation, and application onboarding.
• Influence architecture and engineering teams to align federation patterns with security requirements.
• Support risk-based authentication standards (MFA, contextual controls, privileged user and remote access).
• Non-Human Identity and Service Account Governance
• Develop governance for service accounts, machine identities, API credentials, secrets, certificates, and cloud workload identities.
• Define ownership, lifecycle, rotation, monitoring, review, and decommissioning requirements.
• Establish governance frameworks for AI-enabled systems, autonomous agents, and machine-driven workflows.
• Partner with Cloud, DevOps, Infrastructure, Application Engineering, and CyberArk teams to reduce unmanaged service accounts and increase visibility.
• Implement risk-based recertification focusing on privileged, internet-facing, sensitive data, and critical environments.
• Access Risk, Policy, and Exception Governance
• Create centralized IAM exception governance for deviations, manual access, privileged and federation exceptions, and legacy integrations.
• Define approval, business justification, expiration , compensating controls, risk acceptance, and recurring review criteria.
• Align identity controls with policy, audit, regulatory, and contractual obligations in partnership with GRC, Legal, Compliance, HR, and IT.
• Translate IAM risks for executive reporting, including residual risk, orphaned accounts, review findings, lifecycle failures, and authentication gaps.
• Support enterprise policy updates across identity lifecycle, access governance, PAM, authentication, federation, SoD , service accounts, and reviews.
• Metrics, Reporting, and Continuous Improvement
• Define and maintain an IAM metrics framework aligned to enterprise cyber risk priorities and NIST CSF outcomes.
• Deliver dashboards for SailPoint migration progress, onboarding, access review completion, deprovisioning timeliness, orphaned accounts, PAM coverage, exceptions, and service account governance.
• Use metrics to drive prioritization, executive decisions, audit readiness, and continuous improvement.
• Establish a repeatable process to track and close remediation actions from audits, incidents, reviews, penetration tests, and control failures.
• Develop a multi-year IAM maturity roadmap aligned to cybersecurity strategy, business priorities, and risk reduction.

Education and Experience

• Bachelor’s degree in Information Security , Computer Science, Information Systems, or related field; advanced degree preferred.
• 10+ years of progressive experience in Identity and Access Management, including 5+ years leading enterprise IAM programs.
• Demonstrated leadership of SailPoint IdentityIQ or Identity Security Cloud migrations and large-scale IGA deployments.
• Hands-on leadership maturing CyberArk or equivalent PAM platforms across hybrid environments.
• Experience governing federation and modern authentication (Ping Identity/PingFederate, SAML, OIDC, OAuth).
• Proven track record building IAM operating models, controls, metrics, and executive reporting.
• Successful delivery of risk reduction outcomes in complex, regulated, or global organizations.

Knowledge, Skills, and Abilities

• Deep expertise in identity lifecycle, access governance, role and entitlement modeling, SoD , and certification design.
• Strong understanding of PAM principles, just-in-time access, session monitoring, credential rotation, and privilege reduction.
• Knowledge of non-human identity governance, secrets management, API credentials, and certificate lifecycle management.
• Familiarity with NIST CSF, regulatory expectations, audit practices, and control frameworks relevant to IAM.
• Familiarity with AI/LLM governance and identity controls for AI-enabled platforms.
• Ability to translate technical risk into business terms and influence senior stakeholders.
• Program and change management skills to lead cross-functional migrations and operating model transitions.
• Excellent communication, stakeholder engagement, and vendor/partner management skills.

Travel Requirements

N/A

Physical Demands

• Stationary Position: Frequently
• Vision: 20/20 corrected vision
• Hearing: Receive detailed information if spoken to

Working Conditions