VP, Identity Security Platforms

About the role

The VP, Identity Security Platforms will oversee the management and development of several new tools and capabilities within the Authentication & Security Services division in IAM. We are seeking an experienced information security leader, with broad domain expertise spanning identity, security engineering, security posture management, and cyber operations. This is a leadership position that will manage a team, with some hands on design and engineering as required. This role will work across organizational boundaries to understand the technology ecosystem, while driving operational excellence, governance, & oversight of enterprise services.

Responsibilities

• Develop and execute Identity Security product roadmaps as the Agile Product Owner, applying technical knowledge, industry expertise, and insights, with specialized knowledge in security posture management.
• Manage development, testing, implementation, and operations of ISPM & ITDR platforms to drive identity hygiene.
• Develop and maintain processes for IAM defect identification, triage, remediation, and subsequent system hardening, driving reduction in IAM attack surface.
• Oversee Zero Trust access policy engineering, enabling continuous adaptive policies based on risk, while minimizing friction for authorized users across the enterprise.
• Drive strong governance, technical excellence, operational processes, and risk management of the platforms, leveraging security, performance, and availability metrics.
• Cross-functional collaboration with technical leaders, solution architects, engineers, security stakeholders, governance, and other subject matter experts to review and integrate technologies.
• Perform other duties and/or special projects as assigned.

Qualifications

• BS/BA in Computer Science / other technical degree or Business Management and 10 years of IT experience or in lieu of degree High School Diploma/GED and 15 years of IT experience
• 5+ years of experience leading a team(s) of engineers or analysts
• 5+ years of experience leading the engineering, delivery, and support of technology solutions for medium to large enterprises
• 5+ years of experience in planning, designing, building, & managing enterprise security tools
• 5+ years of experience with security policy engineering (ie: firewall, network, authentication, zero trust policy)
• Strong understanding of identity and access management principles and best practices in modern IDP's, directories, and authentication systems
• Experience with secure architectures, security posture hardening, vulnerability management, and security operations integrations
• Ability and flexibility to travel for business as required

Skills

• 10+ years of experience leading mission critical technology and/or security functions in a large, highly-regulated enterprise
• 5+ years of experience in an information security domain, with specialized subject matter expertise in Identity & Access Management, Infrastructure Security, or similar
• Experience with security posture management tools and concepts (ISPM, CSPM, XSPM, etc.)
• Experience working with agile methodologies as a Product Owner and/or Tech Lead on a product team
• Strong executive presence, with proven ability to communicate technical strategy and tailor messaging to the appropriate audience
• Ability to drive cross-functional change through effective collaboration and understanding of larger business initiatives
• Ability to think strategically about how Synchrony’s Identity Security Platforms will be used to support the organization’s overall goals and objectives
• Proven analytical mindset; Ability to identify patterns or correlation within data sets
• Critical attention to detail; Ability to coordinate multiple deliverables across multiple teams
• Experience designing and building with DevOps, API-driven solutions, and fully automated service delivery capabilities
• Knowledge of regulatory standards and frameworks including SOX, PCI, and NIST
• Knowledge of cyber defense and information security policies, procedures, and regulations
• Knowledge of information technology (IT) risk management policies, requirements, and procedures
• Industry recognized certifications such as CISSP, CISA, CISM, GISP, CASP, etc