Information Security Lead Specialist (IAM)

Job Summary

Manages the security of data and networks to comply with all legal, regulatory and internal policy requirements. Provides significant impact for the organization by placing greater emphasis on innovation, relationship management, and technical expertise. Interfaces regularly with IT peers and business unit leaders to share the corporate security vision and to solicit involvement in achieving higher levels of enterprise security through information sharing and co-operation.

Essential Tasks & Leadership Philosophy

• Lead the deployment, integration, and optimization of enterprise Identity and Access Management (IAM) solutions, ensuring alignment with business, security, and regulatory requirements.
• Serve as a strategic IAM subject matter expert, identifying opportunities to enhance identity governance, access management, authentication, and authorization capabilities across the organization.
• Drive the adoption of modern identity security practices, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), Privileged Access Management (PAM), and identity lifecycle management.
• Develops expertise in insurance business operations in order to drive security innovations for a financial services organization.
• Evaluate emerging IAM technologies and industry best practices to improve security, operational efficiency, and user experience.
• Develops and implements innovative IAM programs, automation capabilities, and minimum viable products (MVPs) that support the organization's strategic security roadmap.
• Partner with business leaders, technology teams, and security stakeholders to define IAM requirements, establish priorities, and deliver enterprise-wide identity initiatives.
• Lead complex IAM projects and programs with broad scope, significant business impact, and cross-functional dependencies.
• Coordinate activities across multiple IAM, cybersecurity, and technology initiatives to ensure alignment with organizational goals and security objectives.
• Resolve complex identity, access, and authentication challenges by developing practical solutions that balance risk reduction with business enablement.
• Develop metrics, dashboards, and executive reporting to communicate IAM program effectiveness, operational performance, compliance posture, and risk trends.
• Builds and owns relationships that positively influence business outcomes.
• Influence enterprise adoption of identity governance and access management best practices through effective communication, education, and stakeholder engagement.
• Partners with business leaders to ensure information security risk findings are reviewed and solutions are implemented.
• Effectively mentors, coaches and influences peers.

First Year Success Factors

• Develop and Execute an Enterprise IAM Roadmap: Assess the current IAM, IGA, PAM, SSO, and MFA environment. Identify security gaps, compliance risks, and improvement opportunities. Create a prioritized roadmap aligned to business and security objectives.
• Strengthen Identity Governance and Access Controls: Improve joiner, mover, and leaver processes. Enhance role-based access controls (RBAC).Implement or mature access certification and periodic access reviews. Reduce inappropriate or excessive access privileges.
• Advance Identity Security Capabilities: Increase adoption of: Single Sign-On (SSO); Multi-Factor Authentication (MFA); Privileged Access Management (PAM); Identity Governance and Administration (IGA) and Improve authentication security while maintaining a positive user experience.
• Deliver Major IAM Initiatives Successfully: Lead large-scale IAM projects across business and technology teams. Ensure implementations are delivered on time and within scope. Minimize disruption to business operations.

Education & Career Experience Requirements

• Bachelor's degree required.
• Relevant Information Security certification (CISSP, SCC, ISSAP and/or ISACA, etc.) required.
• 7-10 years related experience in IT Security or identity access management, and Project Management, or comparable base of knowledge/expertise in the field.
• Strong knowledge of Identity and Access Management principles, including authentication, authorization, identity governance, and access lifecycle management.
• Deep expertise in Identity and Access Management, Identity Governance and Administration (IGA), authentication, authorization, and access lifecycle management.

Physical Actions

Physical Environment