ICAM Manager

Job Description

The ICAM Manager leads our client’s enterprise ICAM program as its operational process owner. The position manages the ICAM program, operating model, and delivery processes rather than directly managing personnel. The role defines and executes the ICAM strategy, governance framework, roadmap, priorities, metrics, and delivery plans across workforce and device identity, authentication, authorization, privileged access, identity governance, data access, service accounts, and non-human identities.

The ICAM Manager leads through influence across Cyber Operations, GRC, Infrastructure, Human Resources, Application Owners, Internal Audit, PMO, and strategic service providers. Cyber Operations leadership and the Director of GRC jointly translate control expectations into practical requirements, while the ICAM Manager converts those requirements into scalable capabilities, clear accountability, coordinated delivery, and measurable outcomes.

• Own the enterprise ICAM roadmap, multi-year strategy, operating model, governance cadence, investment priorities, and success measures.
• Coordinate delivery across Cyber Operations, GRC, Infrastructure, HR, Application Owners, Internal Audit, PMO, vendors, and professional-services partners.

• Lead strategy and maturity across identity governance, authentication, authorization, identity lifecycle, privileged access, service accounts, non-human identities, and cloud identity.
• Advance phishing-resistant MFA, passwordless authentication, Zero Trust principles, role and entitlement governance, and continuous access certification.
• Partner with the Director of Cyber Security Operations and Director of GRC to operationalize control requirements, remediation commitments, and long-term governance objectives.

• Establish accountability for identity data quality, authoritative sources, identity correlation, application ownership, entitlement ownership, and decision rights.

• Lead evaluations and roadmap decisions involving RSA IGL, Okta Identity Governance, Microsoft Entra , Delinea, Service Now, Varonis, and related technologies.

• Establish repeatable processes for access certification, fulfillment verification, evidence retention, exception management, escalation, metrics, and executive reporting.
• Support SOX, SOC 2, HIPAA, HITRUST, and other applicable obligations by ensuring operational controls are sustainable, measurable, and auditable.

• Present priorities, risks, tradeoffs, funding needs, and roadmap recommendations in business-focused language.

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Engineering, Business, or a related discipline, or an equivalent combination of education and relevant experience.

CISSP, CISM, CCSP, vendor identity certifications, or comparable demonstrated expertise preferred.

Eight or more years of experience in identity and access management, identity governance, cybersecurity program leadership, enterprise security architecture, or a closely related discipline.

Demonstrated leadership of enterprise IAM, IGA, PAM, authentication, lifecycle, access-governance, or identity-modernization programs.

Experience leading cross-functional initiatives in regulated, highly audited, or mission-critical environments.

Working knowledge of identity governance, authorization, authentication, privileged access, service accounts, non-human identities, cloud identity, and identity lifecycle management.

Ability to develop operating models, RACI structures, roadmaps, metrics, investment…