Identity and Access Management (IAM) Manager

Job Description

At Regions, the Identity and Access Management (IAM) Manager leads a diverse team of engineers, analysts, and administrators in implementing IAM best practices across the enterprise and ensures operating systems are secure. This position strives to increase efficiency and improve IAM capabilities for the organization. Additionally, this position continuously improves, designs, develops, implements, and monitors appropriate metrics to maintain quality and efficiency.

• Manages a group of analysts, engineers, or administrators to help support the IAM, Mainframe or Operation Systems teams within the Information Security function
• Develops and maintains Information Security standards related to Identity & Access Management
• Ensures all processes are documented appropriately
• Works closely with Risk/Audit partners to meet all compliance objectives as they relate to access management
• Develops Key Risk Indicators (KRI's) and Key Performance Indicators (KPI's) to ensure operational effectiveness
• Identifies opportunities for improvement in the IAM processes and systems
• Plans, estimates, staffs, organizes and monitors significant project activities
• Provides clear and effective communication with all levels of the organization
• Fosters an inclusive, collaborative environment within the team, with Enterprise Architects, Infrastructure, Support and with other IT teams
• Identifies problematic areas and implements strategic solutions
• Serves as primary escalation point for IAM-related issues and provides solutions
• Manages the teams through recruiting, training, coaching, communicating job expectations and appraising associate performance
• Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored to strengthen risk management, compliance, and cyber security, effectively mitigating risk to levels within the company’s risk appetite
• Ensures disciplined change management by evaluating risk and control impacts when designing or implementing changes to processes, systems, products, and/or services

This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

This position is incentive eligible.

• Bachelor’s degree in a related field and six (6) years of related experience
• Two (2) years of lead or supervisory/managerial experience

• Basic understanding of UNIX security, as it relates to user access and provisioning
• Experience managing Information Technology and/or Information Security projects
• Experience with Agile methodology
• Experience with PowerBI/Tableau for reporting projects
• Good understanding of network and infrastructure (Networking protocol knowledge is an advantage- TCP/IP, HTTP, HTTPS, DNS, firewalls, proxies, IDS, IPS etc)
• Recognized security industry certifications preferred (CISSP, CAP, etc.)
• Significant knowledge of Active Directory security, as it relates to user access and provisioning

• Ability to be broadly focused and manage multiple efforts concurrently
• Ability to work effectively to build relationships with colleagues, application owners, and executive management through positive interaction
• Ability to multi-task, to be self-initiated, and work independently
• Demonstrate planning and project management skills
• Excellent customer service and interpersonal skills
• Proactive, decisive, action-oriented individual
• Proven ability to set technology strategy
• Strong attention to detail and outstanding analytical skills
• Strong organizational skills
• Strong written and verbal communication skills
• Understanding of and ability to interpret applicable rules, regulations, and industry guidance

• Oversee administration and optimization of enterprise secrets platforms (Hashi Corp Vault and Cyber Ark), ensuring high availability, scalability, and resilience
• Drive automation of secrets and vault operations (onboarding, provisioning, lifecycle management) through CI/CD pipelines, infrastructure-as-code, and Dev Sec Ops  best practices
• Lead the expansion and maturation of enterprise secrets capabilities, promoting adoption of…