IT Manager – IAM & Security

Overview

Brand Overview:
At maurices, we’re all about feel-good fashion for real life. We’re committed to our service with style promise and to offering affordable fashion that takes women from workday to weekend—and all of life’s adventures in between. With inclusive sizing from 0–24, maurices is known for versatile styles across key categories like denim, dresses, tops, and more. We’ve been doing this since 1931, and today you’ll find us in over 800 communities across North America and online at  At maurices, it’s more than clothes - it’s where fun, friendship and fashion come together!

We believe in putting People First — and that starts with you. We’re a collaborative team that leads with kindness, values authenticity, stays curious, and moves with agility. We work smart, have fun, and support one another in a generously flexible environment that empowers you to thrive both personally and professionally. We’re headquartered in the heart of Duluth, Minnesota overlooking the beautiful shores of Lake Superior.

Our original hometown offers the perfect blend of natural beauty, four-season adventure, and a vibrant college town atmosphere.

Role Purpose: The IT Manager – IAM & Security is responsible for leading the organization’s identity and access management strategy and operations while actively contributing to the broader security program. This role ensures effective governance of user access, strong authentication and authorization practices, and the continuous maturity of identity services across the enterprise. In parallel, the role operates as a hands-on security practitioner, supporting security monitoring, incident response, and control improvements.

This position reports to the Director of Security Risk and Compliance and works closely in partnership on security priorities and initiatives, while collaborating with IT, business stakeholders, and external providers to deliver secure, scalable, and compliant solutions that protect organizational assets and enable business operations.

Identity & Access Management (IAM)

• Lead the overall strategy, governance, and continuous improvement of the organization’s identity and access management capabilities.
• Oversee user lifecycle management processes, ensuring timely and accurate provisioning, access changes, and deprovisioning aligned with business roles and organizational needs.
• Manage directory services and identity platforms to ensure reliable authentication, authorization, and identity data integrity across enterprise applications and environments.
• Drive adoption and expansion of single sign-on (SSO) and federated identity services to improve user experience and strengthen access security.
• Establish and enforce role-based access controls (RBAC) and least-privilege principles across systems, including oversight of privileged access management practices.
• Implement and govern periodic access reviews, certifications, and audit processes to ensure compliance and reduce excessive or inappropriate access.
• Define, document, and maintain IAM processes, policies, and standards, ensuring consistency, scalability, and audit readiness.
• Collaborate with business, HR, and IT stakeholders to align identity services with workforce changes, application onboarding, and digital transformation initiatives.
• Develop and track IAM performance metrics, service levels, and operational health indicators to drive transparency and continuous improvement.
• Support identity integration initiatives across cloud and on-premises platforms, ensuring secure and seamless access experiences.

Security Operations

• Serve as an active, contributing member of the Security team – not an advisory role. Participate in security reviews, policy discussions, incident response, and remediation.
• Own and manage assigned security tools or platforms, including ongoing tuning, alert triage, and continuous improvement of detection capabilities.
• Investigate and respond to security events and incidents, particularly those involving identity, access misuse, or unauthorized activities.
• Support data protection initiatives by enforcing and refining policies related to data…