Identity Security & Governance Director

About the role

The Director, Identity Security & Governance provides global leadership for enterprise identity security strategy, identity governance and administration (IGA), privileged access governance and identity risk management across Information Technology, Medical Device product development and Operational Technology environments. Reporting within Information Security, this role is accountable for assessing identity and access risks before establishing controls, policies, standards and a multi-year roadmap that reduces risk, supports business and product transformation and protects human, non-human and AI-enabled identities across a complex global environment.

Responsibilities

• Create, maintain and execute enterprise identity security and governance strategy, target-state control architecture & investment roadmap aligned with cybersecurity strategy, business transformation, device product development, manufacturing and OT priorities
• Lead enterprise identity governance and administration (IGA) program, inc. joiner-mover-leaver governance, access requests & approvals, access certifications, role & entitlement governance, birthright access, segregation of duties, external identities & evidenence
• Define enterprise security requirements for ZeroTrust access, strong phishing-resistant authentication, Conditional Access, device trust, session controls, privileged access, least privilege & risk-based authorization in IT, product-development and OT environment
• Establish governance for non-human identities, including service accounts, workload and machine identities, secrets and certificates, with accountable ownership, least privilege, lifecycle, rotation, monitoring, recertification and retirement requirements
• Establish security & governance requirements for identities used by AI systems, AI agents and automated workflows, including identity issuance, delegated authority, tool access, authorization boundaries, credential handling, monitoring, traceability and termination
• Create identity threat detection and response strategy, priority risk scenarios, detection and telemetry requirements, escalation criteria and response playbooks in partnership with Security Operations, product cybersecurity, Infrastructure and OT stakeholders
• Lead, coach & develop globally distributed identity security & governance team; manage contractors & service providers; define & report risk, security & delivery measures including lifecycle timeliness, privileged access coverage, non-human and AI identity coverage
• Control effectiveness, exceptions, incidents and roadmap value realization
• Publish and govern an approved enterprise identity security and governance strategy, target-state control architecture and sequenced multi-year roadmap with clear investment, risk and dependency decisions across IT, medical device product development and OT
• Improve identity posture through measurable gains in lifecycle governance, access ownership, certification quality, segregation of duties, strong authentication, privileged access, control effectiveness and identity threat readiness
• Establish measurable governance and lifecycle control for non-human identities and identities used by AI systems, AI agents and automated workflows
• Create sustainable global operating model that clarifies security-governance, platform-operation and risk-ownership responsibilities across Information Security, Infrastructure, HR, application teams, product-development, manufacturing, OT and service partners
• Build a high-performing identity security and governance organization with clear roles, strong technical and risk depth, succession coverage and effective internal and external delivery capacity

Requirements

Demonstrated strategic identity security and governance leadership in a large, complex, global and matrixed enterprise, with the ability to convert business, product, manufacturing and security objectives into a funded multi-year roadmap and executable portfolio

Broad experience with identity technologies such as Microsoft Entra ID Governance, privileged access management, identity orchestration, directory services, secrets management, certificate/public key infrastructure and identity threat detection platforms

Strong command of authentication and authorization architecture, privileged access, passwordless and phishing-resistant authentication, federation, RBAC/ABAC and standards including SAML, OAuth 2.0, OpenID Connect, SCIM and LDAP

Experience governing non-human identities, including service accounts, workload identities, machine identities, secrets and certificates, and addressing their distinct ownership, lifecycle, privilege and monitoring risks

Understanding of identity and authorization risks introduced by AI systems, AI agents and automated workflows, including delegated authority, tool access, credential use, traceability and human accountability

Data-driven leadership with experience establishing KPIs, KRIs, control measures, dashboards and governance routines that demonstrate risk reduction, adoption, control effectiveness and roadmap progress

Hands-on or accountable leadership experience with Microsoft Entra ID/Azure AD and one or more enterprise IGA, PAM, secrets-management or identity security platforms

Relevant certifications are preferred, such as Microsoft identity/security credentials, CISSP, CISM, CRISC, CCSP or vendor-specific IGA/PAM certifications

Qualifications

Bachelor's Degree and 8 years of relevant experience, or Associate's Degree and 10 years of relevant experience, or High School Diploma or Equivalent and 12 years of relevant experience

7+ years of direct responsibility for enterprise identity security strategy, identity governance and administration, privileged access, identity architecture or related security programs in a large-scale, hybrid and globally distributed environment

5+ years of people leadership experience, including responsibility for managers and/or senior professionals, contractors and managed service partners

5+ years of hands-on or accountable leadership experience with Microsoft Entra ID/Azure AD and one or more enterprise IGA, PAM, secrets-management or identity security platforms

Relevant certifications are preferred, such as Microsoft identity/security credentials, CISSP, CISM, CRISC, CCSP or vendor-specific IGA/PAM certifications