IT Manager – IAM & Security

Position Overview

Role Purpose: The IT Manager – IAM & Security is responsible for leading the organization’s identity and access management strategy and operations while actively contributing to the broader security program.

Key Responsibilities:

• Lead the overall strategy, governance, and continuous improvement of the organization’s identity and access management capabilities.
• Oversee user lifecycle management processes, ensuring timely and accurate provisioning, access changes, and deprovisioning aligned with business roles and organizational needs.
• Manage directory services and identity platforms to ensure reliable authentication, authorization, and identity data integrity across enterprise applications and environments.
• Drive adoption and expansion of single sign-on (SSO) and federated identity services to improve user experience and strengthen access security.
• Establish and enforce role-based access controls (RBAC) and least-privilege principles across systems, including oversight of privileged access management practices.
• Implement and govern periodic access reviews, certifications, and audit processes to ensure compliance and reduce excessive or inappropriate access.
• Define, document, and maintain IAM processes, policies, and standards, ensuring consistency, scalability, and audit readiness.
• Collaborate with business, HR, and IT stakeholders to align identity services with workforce changes, application onboarding, and digital transformation initiatives.
• Develop and track IAM performance metrics, service levels, and operational health indicators to drive transparency and continuous improvement.
• Support identity integration initiatives across cloud and on-premises platforms, ensuring secure and seamless access experiences.

Security Operations

• Serve as an active, contributing member of the Security team – not an advisory role.
• Own and manage assigned security tools or platforms, including ongoing tuning, alert triage, and continuous improvement of detection capabilities.
• Investigate and respond to security events and incidents, particularly those involving identity, access misuse, or unauthorized activities.
• Support data protection initiatives by enforcing and refining policies related to data access, usage, and exfiltration prevention.
• Participate in security assessments for new technologies, applications, and third-party vendors to ensure alignment with security standards and risk tolerance.
• Support audit and compliance activities, including evidence collection, control validation, and remediation of findings (e.g., PCI, SOX, or similar frameworks).
• Collaborate with managed security partners and internal teams to enhance detection, response, and overall security posture.

People & Program Leadership

• Lead, develop, and mentor team members and/or partner resources supporting identity and security functions, fostering a culture of accountability, continuous learning, and operational excellence.
• Provide direction and oversight for IAM and security initiatives, ensuring alignment with organizational priorities and business objectives.
• Collaborate cross-functionally with stakeholders across HR, application teams, infrastructure, and security to promote adoption of standards and consistent practices.
• Contribute to strategic planning, roadmap development, and prioritization of identity and security capabilities, ensuring scalability and long-term sustainability.
• Represent identity and security interests in architecture discussions, project planning efforts, and enterprise initiatives to ensure appropriate controls and design considerations are embedded early.