Identity Security Posture Management; ISPM Specialist

Position: Identity Security Posture Management (ISPM) Specialist
Location(s)
Dallas, Texas, Jacksonville, Florida, P&C-Butterfield Road-Downers Grove-IL-AACDetails

Kemper is one of the nation’s leading specialized insurers. Our success is a direct reflection of the talented and diverse people who make a positive difference in the lives of our customers every day. We believe a high-performing culture, valuable opportunities for personal development and professional challenge, and a healthy work-life balance can be highly motivating and productive. Kemper’s products and services are making a real difference to our customers, who have unique and evolving needs.

By joining our team, you are helping to provide an experience to our stakeholders that delivers on our promises.

Manages and matures our identity security posture—executes continuously monitoring and remediating identity risk and access exposure across IAM/IGA/PAM—reducing breach likelihood and audit/compliance risk. The Identity Security Posture Management (ISPM) Specialist is responsible for improving the organization’s identity security posture by continuously identifying, prioritizing, and driving remediation of identity-related exposures across the enterprise. This role partners with Account Operations, IGA, PAM, Cybersecurity Operations, IT infrastructure, and application owners to reduce identity attack paths, strengthen privileged access controls, and produce measurable risk reduction aligned to regulatory and audit expectations

Responsibilities:

Identity posture monitoring & exposure management

Operate and mature the Identity Security Posture Management capability (ISPM) to discover identity exposures across Identity Providers (e.g., Entra /AD), SaaS applications, cloud environments, and critical business systems.

Identify and track identity security issues such as excessive privileges, dormant accounts, misconfigured admin roles, weak authentication enforcement, privilege escalation paths, and risky third-party access.

Maintain an Identity Exposure Register with severity, business impact, owner, remediation plan, and due dates; enforce SLA-based remediation for critical findings.

Risk prioritization & remediation orchestration

Triage and prioritize findings using risk-based methods (e.g., likelihood/impact, exploitability, business criticality).Coordinate remediation with system owners: role redesign, least privilege enforcement, MFA coverage improvements, privileged role controls, conditional access, and entitlement clean-up.

Drive reduction of inappropriate combinations and segmentation-of-duties issues where relevant.

Controls, audit, and compliance enablement

Provide evidence to support identity-related controls (e.g., privileged access governance, MFA enforcement, access review/UAR posture, joiner-mover-leaver quality, service account governance).Produce audit-ready reporting and artifacts for internal audit and external auditors (SOX/ITGC/GITC reliance, regulator exams).Ensure posture findings are connected to policy/standard requirements and tracked through governance workflows.

Telemetry, metrics, and executive reporting

Build and maintain ISPM dashboards and KRIs (e.g., privileged role sprawl, stale privileged accounts, MFA coverage, high-risk entitlements, remediation cycle time).Present posture trends and remediation progress to Identity Security & Governance leadership and stakeholders (CISO org, IT, app owners).Integration & automation

Partner with engineering teams to integrate ISPM insights with ticketing/workflow tools (e.g., Axonius, Service Now/Jira), SIEM/SOAR, IGA (e.g., SailPoint), and PAM (e.g., Cyber Ark).Automate repeatable posture checks where possible (APIs, scripts, scheduled reports), and document repeatable playbooks/runbooks.

Collaboration & stakeholder enablement

Act as a trusted advisor to application and infrastructure teams on identity security best practices (least privilege, role design, privileged access, authentication hardening).Contribute to identity governance operating procedures, playbooks, and standard updates.

Job Requirements Bachelor's degree or an equivalent mix of education and experience in Information Cyber Security, Risk Management and Governance Risk and…