Manager, Cybersecurity, Privileged Access Management - Remote
for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. There's no explicit EEO etc. There's "Preference will be given to candidates residing in the Eastern or Central time zones." That's substantive? It's a preference note; keep.
We need to include Pay section because posting states pay ranges. Include Benefits section because health and financial benefits listed. Schedule? Not mentioned; no schedule info, so omit Schedule section.
Skills? Could be derived from qualifications? Might not need separate Skills if covered in Requirements/Qualifications. We can include Skills if there is explicit list; not really. We'll omit Skills.
We need to include About the role (intro). Responsibilities (technical and leadership). Requirements (maybe required qualifications). Qualifications (preferred?). Could combine required and preferred under Requirements? But spec says separate headings: Requirements, Qualifications, Skills. We'll follow: Requirements = required qualifications. Qualifications = preferred qualifications. Skills maybe not needed.
We need to include Benefits (health and financial). Pay (ranges). Also maybe include location preference note under About the role or a separate note? Could be part of About the role.
We must not include duplicated lines. Ensure we capture all details.
Let's extract content:
Preference will be given to candidates residing in the Eastern or Central time zones.
As a PAM Manager, you will lead Stryker’s enterprise Privileged Access Management program, protecting privileged accounts, credentials, secrets, and sessions across on-premises, cloud, and hybrid environments. You will own the PAM strategy and operating model, lead a team of analysts, and partner with Infrastructure, Cloud, Security Operations, Application, and Audit teams to reduce privileged access risk and support regulatory compliance.
What you will do:
Technical Responsibilities:
- Own the enterprise PAM strategy, roadmap, engineering standards, and operating model aligned with Zero Trust and least-privilege principles.
- Lead the deployment and operation of CyberArk, BeyondTrust, or Delinea across privileged account, credential, secrets, and session-management use cases.
- Manage the privileged account lifecycle, including provisioning, deprovisioning, vaulting, rotation, and check-in/check-out for human and shared privileged accounts.
- Implement privileged session monitoring and recording for high-risk administrative access, just-in-time and time-bound access, and endpoint privilege management to remove local administrator rights and enforce application control.
- Design and govern break-glass access procedures with approval and audit controls, and manage brokered, monitored, and time-limited third-party privileged access.
- Partner with Infrastructure, Cloud, Security Operations, and Application teams to onboard privileged accounts and integrate PAM controls.
- Support SOX, HIPAA, ISO 27001, and NIST Cybersecurity Framework requirements through reporting and audit evidence for privileged access controls.
Leadership & People Management Responsibilities:
- Lead PAM analysts by setting priorities, engineering standards, performance expectations, and day-to-day operating practices.
Knowledge and Capabilities:
- Assess privileged access risks, resolve complex identity-security issues, and balance competing program priorities.
- Translate PAM risks, control requirements, and implementation decisions into clear guidance for technical teams, business partners, and auditors.
What You Need:
Required Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline
- Minimum 8 years of experience in identity or cybersecurity, including a minimum 4 years of experience focused on privileged access management.
- Hands-on experience deploying and operating CyberArk, BeyondTrust, or Delinea.
- Experience with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management.
- Experience securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments.
- People-leadership or team-lead experience managing analysts or engineers.
Preferred Qualifications
- Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
- CyberArk Defender or Sentry, CISSP, BeyondTrust, or Delinea certification, or formal training in privileged access management, identity security, or Zero Trust architecture.
Posted Date: 09/14/2026
This role will be posted for a minimum of 3 days.
United States of America
Pay Ranges:
USN: $135,600 - $225,900 USD Annual
US5: $142,400 - $237,200 USD Annual
US10: $149,200 - $248,500 USD Annual
US15: $155,900 - $259,800 USD Annual
US20: $162,700 - $271,100 USD Annual
US30: $176,300 - $293,700 USD Annual
View the U.S. work location and transparency guide to find the pay range for your location.
Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program.
Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance.
Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually.
Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.
We need to remove boilerplate like "Posted Date: 09/14/2026 This role will be posted for a minimum of 3 days." Might be considered metadata; but spec says do NOT put Job ID/requisition numbers as headings — fold minor metadata into a short
or drop it. This is minor metadata; we can include in a short p maybe under About the role or at end. Probably we can drop it as not substantive? It's not essential job description. Could keep as a short p.
We need to preserve all substantive information; posting date maybe not substantive but could be considered metadata; we can drop or include in a short p. Safer to include as a short p.
Now construct HTML:
About the role
Preference will be given to candidates residing in the Eastern or Central time zones. As a PAM Manager, you will lead Stryker’s enterprise Privileged Access Management program, protecting privileged accounts, credentials, secrets, and sessions across on-premises, cloud, and hybrid environments. You will own the PAM strategy and operating model, lead a team of analysts, and partner with Infrastructure, Cloud, Security Operations, Application, and Audit teams to reduce privileged access risk and support regulatory compliance.
Responsibilities
Technical Responsibilities
??? But we only allowed for section headings. Could we use for each subsection? The instruction: use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but we should stick to those. Could embed Technical Responsibilities as a with a preceding describing? Might be okay to have a
"Technical Responsibilities:" then list. Similarly for Leadership.
Thus:
Responsibilities
Technical Responsibilities:
- Own the enterprise PAM strategy, roadmap, engineering standards, and operating model aligned with Zero Trust and least-privilege principles.
...
Leadership & People Management Responsibilities:
- Lead PAM analysts by setting priorities, engineering standards, performance expectations, and day-to-day operating practices.
Knowledge and Capabilities:
- Assess privileged access risks, resolve complex identity-security issues, and balance competing program priorities.
- Translate PAM risks, control requirements, and implementation decisions into clear guidance for technical teams, business partners, and auditors.
But we used inside . That's okay; not prohibited.
Now Requirements:
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline
- Minimum 8 years of experience in identity or cybersecurity, including a minimum 4 years of experience focused on privileged access management.
- Hands-on experience deploying and operating CyberArk, BeyondTrust, or Delinea.
- Experience with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management.
- Experience securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments.
- People-leadership or team-lead experience managing analysts or engineers.
Qualifications (preferred):
Qualifications
- Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
- CyberArk Defender or Sentry, CISSP, BeyondTrust, or Delinea certification, or formal training in privileged access management, identity security, or Zero Trust architecture.
Benefits:
Benefits
Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program.
Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance.
Pay:
Pay
USN: $135,600 - $225,900 USD Annual
US5: $142,400 - $237,200 USD Annual
US10: $1
for prose. We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. There's no explicit EEO etc. There's "Preference will be given to candidates residing in the Eastern or Central time zones." That's substantive? It's a preference note; keep. We need to include Pay section because posting states pay ranges. Include Benefits section because health and financial benefits listed. Schedule? Not mentioned; no schedule info, so omit Schedule section. Skills? Could be derived from qualifications? Might not need separate Skills if covered in Requirements/Qualifications. We can include Skills if there is explicit list; not really. We'll omit Skills. We need to include About the role (intro). Responsibilities (technical and leadership). Requirements (maybe required qualifications). Qualifications (preferred?). Could combine required and preferred under Requirements? But spec says separate headings: Requirements, Qualifications, Skills. We'll follow: Requirements = required qualifications. Qualifications = preferred qualifications. Skills maybe not needed. We need to include Benefits (health and financial). Pay (ranges). Also maybe include location preference note under About the role or a separate note? Could be part of About the role. We must not include duplicated lines. Ensure we capture all details. Let's extract content: Preference will be given to candidates residing in the Eastern or Central time zones. As a PAM Manager, you will lead Stryker’s enterprise Privileged Access Management program, protecting privileged accounts, credentials, secrets, and sessions across on-premises, cloud, and hybrid environments. You will own the PAM strategy and operating model, lead a team of analysts, and partner with Infrastructure, Cloud, Security Operations, Application, and Audit teams to reduce privileged access risk and support regulatory compliance. What you will do: Technical Responsibilities: - Own the enterprise PAM strategy, roadmap, engineering standards, and operating model aligned with Zero Trust and least-privilege principles. - Lead the deployment and operation of CyberArk, BeyondTrust, or Delinea across privileged account, credential, secrets, and session-management use cases. - Manage the privileged account lifecycle, including provisioning, deprovisioning, vaulting, rotation, and check-in/check-out for human and shared privileged accounts. - Implement privileged session monitoring and recording for high-risk administrative access, just-in-time and time-bound access, and endpoint privilege management to remove local administrator rights and enforce application control. - Design and govern break-glass access procedures with approval and audit controls, and manage brokered, monitored, and time-limited third-party privileged access. - Partner with Infrastructure, Cloud, Security Operations, and Application teams to onboard privileged accounts and integrate PAM controls. - Support SOX, HIPAA, ISO 27001, and NIST Cybersecurity Framework requirements through reporting and audit evidence for privileged access controls. Leadership & People Management Responsibilities: - Lead PAM analysts by setting priorities, engineering standards, performance expectations, and day-to-day operating practices. Knowledge and Capabilities: - Assess privileged access risks, resolve complex identity-security issues, and balance competing program priorities. - Translate PAM risks, control requirements, and implementation decisions into clear guidance for technical teams, business partners, and auditors. What You Need: Required Qualifications - Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline - Minimum 8 years of experience in identity or cybersecurity, including a minimum 4 years of experience focused on privileged access management. - Hands-on experience deploying and operating CyberArk, BeyondTrust, or Delinea. - Experience with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management. - Experience securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments. - People-leadership or team-lead experience managing analysts or engineers. Preferred Qualifications - Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline. - CyberArk Defender or Sentry, CISSP, BeyondTrust, or Delinea certification, or formal training in privileged access management, identity security, or Zero Trust architecture. Posted Date: 09/14/2026 This role will be posted for a minimum of 3 days. United States of America Pay Ranges: USN: $135,600 - $225,900 USD Annual US5: $142,400 - $237,200 USD Annual US10: $149,200 - $248,500 USD Annual US15: $155,900 - $259,800 USD Annual US20: $162,700 - $271,100 USD Annual US30: $176,300 - $293,700 USD Annual View the U.S. work location and transparency guide to find the pay range for your location. Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program. Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance. Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually. Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role. We need to remove boilerplate like "Posted Date: 09/14/2026 This role will be posted for a minimum of 3 days." Might be considered metadata; but spec says do NOT put Job ID/requisition numbers as headings — fold minor metadata into a short
or drop it. This is minor metadata; we can include in a short p maybe under About the role or at end. Probably we can drop it as not substantive? It's not essential job description. Could keep as a short p. We need to preserve all substantive information; posting date maybe not substantive but could be considered metadata; we can drop or include in a short p. Safer to include as a short p. Now construct HTML:
About the role
Preference will be given to candidates residing in the Eastern or Central time zones. As a PAM Manager, you will lead Stryker’s enterprise Privileged Access Management program, protecting privileged accounts, credentials, secrets, and sessions across on-premises, cloud, and hybrid environments. You will own the PAM strategy and operating model, lead a team of analysts, and partner with Infrastructure, Cloud, Security Operations, Application, and Audit teams to reduce privileged access risk and support regulatory compliance.
Responsibilities
Technical Responsibilities
??? But we only allowed for section headings. Could we use for each subsection? The instruction: use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but we should stick to those. Could embed Technical Responsibilities as a with a preceding describing? Might be okay to have a
"Technical Responsibilities:" then list. Similarly for Leadership.
Thus:
Responsibilities
Technical Responsibilities:
- Own the enterprise PAM strategy, roadmap, engineering standards, and operating model aligned with Zero Trust and least-privilege principles.
...
Leadership & People Management Responsibilities:
- Lead PAM analysts by setting priorities, engineering standards, performance expectations, and day-to-day operating practices.
Knowledge and Capabilities:
- Assess privileged access risks, resolve complex identity-security issues, and balance competing program priorities.
- Translate PAM risks, control requirements, and implementation decisions into clear guidance for technical teams, business partners, and auditors.
But we used inside . That's okay; not prohibited.
Now Requirements:
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline
- Minimum 8 years of experience in identity or cybersecurity, including a minimum 4 years of experience focused on privileged access management.
- Hands-on experience deploying and operating CyberArk, BeyondTrust, or Delinea.
- Experience with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management.
- Experience securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments.
- People-leadership or team-lead experience managing analysts or engineers.
Qualifications (preferred):
Qualifications
- Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
- CyberArk Defender or Sentry, CISSP, BeyondTrust, or Delinea certification, or formal training in privileged access management, identity security, or Zero Trust architecture.
Benefits:
Benefits
Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program.
Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance.
Pay:
Pay
USN: $135,600 - $225,900 USD Annual
US5: $142,400 - $237,200 USD Annual
US10: $1
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but we should stick to those. Could embed Technical Responsibilities as a with a preceding describing? Might be okay to have a
"Technical Responsibilities:" then list. Similarly for Leadership.
Thus:
Responsibilities
Technical Responsibilities:
- Own the enterprise PAM strategy, roadmap, engineering standards, and operating model aligned with Zero Trust and least-privilege principles.
...
Leadership & People Management Responsibilities:
- Lead PAM analysts by setting priorities, engineering standards, performance expectations, and day-to-day operating practices.
Knowledge and Capabilities:
- Assess privileged access risks, resolve complex identity-security issues, and balance competing program priorities.
- Translate PAM risks, control requirements, and implementation decisions into clear guidance for technical teams, business partners, and auditors.
But we used inside . That's okay; not prohibited.
Now Requirements:
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline
- Minimum 8 years of experience in identity or cybersecurity, including a minimum 4 years of experience focused on privileged access management.
- Hands-on experience deploying and operating CyberArk, BeyondTrust, or Delinea.
- Experience with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management.
- Experience securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments.
- People-leadership or team-lead experience managing analysts or engineers.
Qualifications (preferred):
Qualifications
- Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
- CyberArk Defender or Sentry, CISSP, BeyondTrust, or Delinea certification, or formal training in privileged access management, identity security, or Zero Trust architecture.
Benefits:
Benefits
Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program.
Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance.
Pay:
Pay
USN: $135,600 - $225,900 USD Annual
US5: $142,400 - $237,200 USD Annual
US10: $1
describing? Might be okay to have a
"Technical Responsibilities:" then list. Similarly for Leadership. Thus:
Responsibilities
Technical Responsibilities:
- Own the enterprise PAM strategy, roadmap, engineering standards, and operating model aligned with Zero Trust and least-privilege principles. ...
Leadership & People Management Responsibilities:
- Lead PAM analysts by setting priorities, engineering standards, performance expectations, and day-to-day operating practices.
Knowledge and Capabilities:
- Assess privileged access risks, resolve complex identity-security issues, and balance competing program priorities.
- Translate PAM risks, control requirements, and implementation decisions into clear guidance for technical teams, business partners, and auditors.
. That's okay; not prohibited. Now Requirements:
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline
- Minimum 8 years of experience in identity or cybersecurity, including a minimum 4 years of experience focused on privileged access management.
- Hands-on experience deploying and operating CyberArk, BeyondTrust, or Delinea.
- Experience with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management.
- Experience securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments.
- People-leadership or team-lead experience managing analysts or engineers.
Qualifications
- Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
- CyberArk Defender or Sentry, CISSP, BeyondTrust, or Delinea certification, or formal training in privileged access management, identity security, or Zero Trust architecture.
Benefits
Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program.
Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance.
Pay:Pay
USN: $135,600 - $225,900 USD Annual
US5: $142,400 - $237,200 USD Annual
US10: $1