Senior Identity and Access Management (IAM) Access Controls & Entitlement Specialist, Cloud Security

• Modernize enterprise access control capabilities through automation, AI-assisted analysis, workflow optimization, and data-driven insights.
• Drive transformation initiatives focused on cloud entitlement visibility, access intelligence, permission analytics, and access lifecycle efficiencies.
• Establish enterprise standards for cloud role engineering, entitlement taxonomy, permission management, and cloud access model design.
• Drive adoption of RBAC, ABAC, PBAC, and SOD controls within enterprise and cloud environments.
• Modernize the SOD design, implementation, controls, and oversight framework and practices for sustainable risk reduction.
• Develop sustainable approaches for governing cloud permissions, cloud identities, and cloud resource access at scale.
• Partner with cloud engineering and architecture teams to implement scalable cloud access models while reducing entitlement sprawl and excessive permissions.
• Operate through ambiguity, break down complex problems, and create structure where processes or accountabilities are unclear.
• Improve role quality, entitlement quality, access profiling, and access model effectiveness across technology platforms.
• Identify opportunities to reduce manual activities and simplify operational processes while strengthening risk mitigation.
• Act as a senior advisor on cloud access controls, entitlement strategy, and access modeling.
• Partner across IAM, Security, Technology, Product, and Line of Business teams to drive adoption of modern access control frameworks.
• Lead complex initiatives involving cloud permissions, entitlement management, role engineering, and access risk reduction.
• Translate technical access control concepts into actionable business outcomes for senior leadership.
• Lead the strategy and execution of cloud access control capabilities across AWS, Azure, GCP, SaaS platforms, and emerging cloud-native technologies.

• 10+ years of IAM, Cybersecurity, Cloud Security, or Access Management experience
• Experience with Industry Standards & Framework (ISO, NIST, FFIEC, COBIT, CSA) related to Segregation of Duties (SoD)
• Experience implementing RBAC, ABAC, PBAC, JIT, Runtime, and cloud access control frameworks within large financial services or banking organizations
• Experience designing and managing Cloud Permission Models & Entitlement Analytics across AWS, Azure, and GCP
• Experience leading enterprise-scale IAM transformation and modernization initiatives
• Experience partnering with Architecture, Engineering, Cloud Security, and Business stakeholders
• Experience using analytics, automation, and process optimization to improve security outcomes
• Experience implementing Automation, AI-Enabled Solutions & Workflow Optimization
• Experience performing data analytics and design solutions using scripting (Python, R, SQL) and industry tools (Wiz, Bloodhound, Splunk, Tableau, PowerBI, Pivot Tables)
• Experience with Microsegmentation and monitoring tools.
• Strong understanding of Cloud & Enterprise Infrastructure Platforms & Network
• Strong analytical and data-driven decision-making capabilities.

Demonstrates extensive experience in IAM, Cybersecurity, and Cloud Security, with a strong focus on implementing RBAC, ABAC, and cloud access control frameworks. Proven ability to lead enterprise-scale transformation initiatives and optimize access management processes through automation and data analytics.

• IAM Transformation Leadership
• Cloud Access Control Frameworks
• RBAC, ABAC, PBAC Implementation
• Data Analytics and Automation
• Cloud Permission Models Design

• IAM
• Cybersecurity
• Cloud Security
• RBAC
• ABAC
• PBAC
• Data Analytics
• Scripting (Python, R, SQL)
• Cloud Permission Models
• Microsegmentation

• Analytical Decision-Making
• Problem-Solving
• Collaboration

• Segregation of Duties (SoD)
• ISO
• NIST
• FFIEC
• COBIT
• CSA
• Access Management
• Entitlement Analytics

• AWS
• Azure
• GCP
• Wiz
• Bloodhound
• Splunk
• Tableau
• PowerBI