IAM Risk & Governance Lead

We need to output HTML fragment with sections: headings using

for each section present: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must only include sections that have real specific content. The posting includes: - Intro: "Job Description This position is not eligible for visa sponsorship, now or in the future. Candidates must be a US Citizen or valid Green Card Holder. This position is hybrid 3 days per week in the week in the following office locations: Cincinnati, OH or Atlanta, GA Ready to take your career global? ..." We need to parse content into sections. We have "What You’ll Own" which is responsibilities. We have "What You’ll Bring" which is requirements/qualifications/skills. We have "About The Team" which is about the team, maybe "About the role"? Actually "About The Team" is about team culture, could be "About the role" or maybe we treat as "About the role"? The instruction: Use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can map: - About the role: maybe the introductory paragraph describing role and location, plus maybe "Ready to take your career global? ..." That's about the role. - Responsibilities: "What You’ll Own" bullet list. - Requirements: maybe "What You’ll Bring" includes experience, ability, etc. Could split into Requirements and Qualifications and Skills. But we should not create thin sections; prefer few substantive sections. So we could combine Requirements and Qualifications into one section? But we need headings exactly as given? The instruction says use those headings for sections; but we can omit sections if no content. It says "Prefer a few substantive sections over many thin ones." So we can combine similar content into one heading, maybe "Requirements" covering experience, abilities, etc. Or we could have "Qualifications" and "Skills" separate if there is distinct content. Let's see content: "What You’ll Bring" includes: - 10+ years in IAM, cybersecurity risk, technology controls, or audit readiness, including 3+ years leading teams or cross-functional IAM governance programs in a large, regulated enterprise. - Ability to build and coach a team, set priorities, and hold stakeholders accountable for outcomes. - Demonstrated leadership of IAM workstreams across multiple SOX/SOC and internal or external audit cycles, including walkthroughs, control testing coordination, evidence quality assurance, deficiency assessment, corrective-action tracking, and executive reporting. - Strong working knowledge of IAM, PAM, and IGA controls, including joiner-mover-leaver processes, authentication, privileged access, access reviews, segregation of duties, dormant accounts, excessive permissions, and cloud identity governance. - Ability to translate technical workflows and configurations into clear control narratives and risk decisions. - Hands-on experience operating GRC evidence and remediation workflows in platforms such as AuditBoard, Archer, or ServiceNow, plus experience leading enterprise platform evaluation or implementation. - Ability to define requirements, assess integration and automation options, manage a backlog, and demonstrate adoption and operational value. - Strong stakeholder management across IAM engineering, control owners, GRC, Finance, service providers, and auditors. - Ability to build business cases, define useful control metrics and dashboards, communicate material risk to executives, and drive timely remediation across organizational boundaries. - It’s a bonus if you have Experience integrating GRC workflows with platforms such as SailPoint, Saviynt, BeyondTrust, CyberArk, Delinea, Microsoft Entra ID, Okta, AWS, or enterprise HR and service-management systems. - Experience with control automation, continuous control monitoring, permissions-risk dashboards, and process improvement that measurably reduces evidence preparation and control-owner workload. - Relevant credentials such as CISA, CRISC, CISSP, CISM, PMP, Security+, Scrum Master, or Lean Six Sigma, and experience in payments or financial services. Thus we have experience, abilities, knowledge, bonus, credentials. We could split into Requirements (experience, abilities), Qualifications (credentials), Skills (specific platforms). But to avoid thin sections, maybe we combine into one "Requirements" covering all. However the instruction says we can use those headings; we can choose to include only those with real content. If we include only "Requirements" and omit Qualifications and Skills, that's okay as long as we have substantive content. But we might lose some nuance. However the instruction: "Prefer a few substantive sections over many thin ones." So we can combine. Thus sections: - About the role: includes intro paragraph about visa, citizenship, hybrid, location, and the motivational paragraph. - Responsibilities: "What You’ll Own" bullet list. - Requirements: "What You’ll Bring" content (maybe as bullet list). - Benefits, Pay, Schedule: not present, so omit. - About The Team: could be considered "About the role"? Actually there is a separate "About The Team" section describing culture. Could map to "About the role"? But we already have About the role. Could we add another section like "About the team"? Not in allowed headings list. The allowed headings are only those listed. So we cannot create a custom heading like "About The Team". We could incorporate that content into "About the role" or maybe treat as "About the role" (since it's about the team/culture). The instruction says use those headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings? It says use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). Likely they expect only those headings. So we should map "About The Team" content under "About the role". Or we could omit it if it's not substantive? But it's substantive about team culture. Better to include under About the role. Thus About the role will contain: - Visa sponsorship note, citizenship requirement, hybrid schedule, locations. - Motivational paragraph: "Ready to take your career global? Make your mark at one of the biggest names in payments. We’re looking for an IAM Risk and Governance Lead to join our ever-evolving IAM team and help shape the future of global commerce." - About The Team paragraph: "Our inclusive and global teams win together every day. We’re proud to have the best minds in the industry, who you can learn from as you grow your career. The people, the energy, the connections – it’s unmatched. Come and be part of an ever-evolving company and get dynamic opportunities that go beyond borders. What makes a Globalpayer? Globalpayers think like a client, act like an owner and win as one team. We’re curious and innovative – always finding better ways to deliver impact. We empower each other to make decisions, and it’s our passion that drives excellence in everything we set out to do. Does this sound like you? Then you sound like a Globalpayer. Apply now to take your career global." We should remove EEOC statement, drug test, reasonable accommodations, Washington Candidates, etc. Also remove "Apply now to take your career global." maybe duplicate? It's in About The Team; we can keep as part of description but it's basically a call to action; maybe we keep it as part of About the role. Now Responsibilities: list items from "What You’ll Own". We'll output as

• each. Requirements: list items from "What You’ll Bring". We'll output as
  • each. We must not include headings for empty sections. Now produce HTML fragment: no or . Just sections. Let's craft. First, About the role:

    About the role

    This position is not eligible for visa sponsorship, now or in the future. Candidates must be a US Citizen or valid Green Card Holder. This position is hybrid 3 days per week in the following office locations: Cincinnati, OH or Atlanta, GA. Ready to take your career global? Make your mark at one of the biggest names in payments. We’re looking for an IAM Risk and Governance Lead to join our ever-evolving IAM team and help shape the future of global commerce. Our inclusive and global teams win together every day. We’re proud to have the best minds in the industry, who you can learn from as you grow your career. The people, the energy, the connections – it’s unmatched. Come and be part of an ever-evolving company and get dynamic opportunities that go beyond borders. What makes a Globalpayer? Globalpayers think like a client, act like an owner and win as one team. We’re curious and innovative – always finding better ways to deliver impact. We empower each other to make decisions, and it’s our passion that drives excellence in everything we set out to do. Does this sound like you? Then you sound like a Globalpayer. Apply now to take your career global.

    Now Responsibilities:

    Responsibilities

    • Lead the IAM Controls & Audit team, establishing operating standards, ownership models, staffing priorities, and a multi-year controls and automation roadmap.
    • Own IAM audit and assessment coordination across SOX, SOC, internal/external audits, regulatory reviews, customer audits, and security assessments, from planning through remediation.
    • Develop and govern the IAM control framework covering identity lifecycle management, access provisioning, authentication, privileged access, certifications, segregation of duties, and cloud/service identities.
    • Drive control readiness and remediation by overseeing testing, evidence quality, issue tracking, root cause analysis, corrective actions, and risk escalation.
    • Lead IAM GRC strategy and platform management, including tool selection, implementation, integrations, governance, vendor management, and ongoing service delivery.
    • Automate audit and control processes through integrations with IAM, IGA, PAM, HR, cloud, and service management platforms to improve efficiency, traceability, and compliance.
    • Chair the IAM Controls Council and provide leadership reporting on control health, audit outcomes, remediation status, automation adoption, risk reduction, and operational effectiveness.
    Now Requirements:

    Requirements

    • 10+ years in IAM, cybersecurity risk, technology controls, or audit readiness, including 3+ years leading teams or cross-functional IAM governance programs in a large, regulated enterprise.
    • Ability to build and coach a team, set priorities, and hold stakeholders accountable for outcomes.
    • Demonstrated leadership of IAM workstreams across multiple SOX/SOC and internal or external audit cycles, including walkthroughs, control testing coordination, evidence quality assurance, deficiency assessment, corrective-action tracking, and executive reporting.
    • Strong working knowledge of IAM, PAM, and IGA controls, including joiner-mover-leaver processes, authentication, privileged access, access reviews, segregation of duties, dormant accounts, excessive permissions, and cloud identity governance.
    • Ability to translate technical workflows and configurations into clear control narratives and risk decisions.
    • Hands-on experience operating GRC evidence and remediation workflows in platforms such as AuditBoard, Archer, or ServiceNow, plus experience leading enterprise platform evaluation or implementation.
    • Ability to define requirements, assess integration and automation options, manage a backlog, and demonstrate adoption and operational value.
    • Strong stakeholder management across IAM engineering, control owners, GRC, Finance, service providers, and auditors.
    • Ability to build business cases, define useful control metrics and dashboards, communicate material risk to executives, and drive timely remediation across organizational boundaries.
    • Experience integrating GRC workflows with platforms such as SailPoint, Saviynt, BeyondTrust, CyberArk, Delinea, Microsoft Entra ID, Okta, AWS, or enterprise HR and service-management