Manager, Identity & Access Management; IAM

Manager, Identity & Access Management (IAM)

Candescent is a forward-thinking technology company transforming how financial institutions deliver Intelligent Banking experiences. We unite digital banking, account opening, and branch solutions that power and connect digital banking, account opening, and branch solutions—creating seamless engagement across digital, remote, and in-person channels.

Our Experience-Led, Intelligence-Driven approach combines human-centered design with data, automation, and cloud-based innovation. Built on an API-first architecture, our extensible ecosystem enables institutions to adapt quickly, integrate easily, and unlock new opportunities for growth—turning every customer interaction into a moment of clarity, confidence, and connection.

The Manager, Identity & Access Management (IAM) at Candescent will report directly to the Chief Information Security Officer (CISO) and be responsible for leading the strategy, implementation, operation, and continuous improvement of Candescent's enterprise Identity and Access Management program. This role will oversee identity governance, privileged access management, authentication services, access lifecycle management, and modern identity architectures that support Candescent's workforce, customers, partners, cloud platforms, and business applications.

The ideal candidate will be a strong technical and people leader with deep expertise in IAM technologies, Zero Trust principles, identity governance, privileged access management, cloud identity platforms, regulatory compliance, and security operations. This leader will partner across Information Security, Infrastructure, Cloud Operations, Product Security, Engineering, HR, Risk, Compliance, and Internal Audit teams to ensure secure, compliant, and efficient access management across the enterprise.

• Define and execute the enterprise IAM strategy aligned with Candescent's business objectives, cybersecurity strategy, and regulatory obligations.
• Develop and mature IAM capabilities supporting workforce, customer, vendor, partner, and privileged identities.
• Partner with executive leadership to establish identity security roadmaps, priorities, and investment strategies.
• Lead adoption of Zero Trust principles through strong authentication, least privilege access, role-based access controls, and continuous verification.
• Evaluate emerging identity security trends, technologies, threats, and regulatory requirements to continuously improve the IAM program.
• Provide executive reporting on IAM effectiveness, access risks, compliance status, KPIs, and key risk indicators.

• Lead the design, implementation, and operation of Identity Governance and Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), passwordless authentication, and directory services.
• Establish enterprise processes for user provisioning, deprovisioning, access certification, role management, segregation of duties, and privileged access controls.
• Develop and maintain identity security policies, standards, procedures, and governance frameworks.
• Ensure IAM controls are consistently implemented across cloud, SaaS, on-premises, and hybrid environments.
• Oversee access review campaigns, privileged account reviews, and remediation activities.
• Lead IAM project delivery including technology implementations, integrations, upgrades, and modernization initiatives.

• Establish governance processes to ensure appropriate access controls are maintained throughout the identity lifecycle.
• Partner with Compliance, Risk, Legal, HR, and Internal Audit teams to support regulatory and audit requirements.
• Maintain controls supporting SOC 1, SOC 2, FFIEC, PCI DSS, SOX, GDPR, GLBA, and other applicable regulatory frameworks.
• Ensure role-based and risk-based access management controls are documented, measured, and monitored.
• Develop IAM evidence collection, control validation, and audit response procedures.
• Support third-party and customer security reviews involving identity management controls.

• Lea…