IT Manager, Identity Lifecycle and Governance

Medtronic is a global leader in healthcare technology with a Mission to alleviate pain, restore health, and extend life. Our 95,000 employees work across more than 150 countries to put patients first — developing innovative medical technologies that improve the lives of 72+ million patients each year. Your unique talents will help shape the future of healthcare while building a career grounded in purpose, growth, and impact.

The Identity and Access Management (IAM) Governance function is responsible for establishing and maintaining the policies, standards, processes, and controls that ensure access to technology resources is appropriate, authorized, and aligned with business requirements and risk tolerance. The team partners with Information Security, IT, Risk, Compliance, Internal Audit, application owners, and business stakeholders to strengthen identity governance, support regulatory and control requirements, and reduce unauthorized access risk across the enterprise.

This position is part of Medtronic's Cybersecurity organization and may be based onsite at a Medtronic hub location, including Minneapolis, MN;
Dallas/Fort Worth, TX;
Tempe, AZ;
New Haven, CT;
Irvine, CA;
Boston, Massachusetts or Jacksonville, FL. Minneapolis is the preferred location. This role follows an onsite work model and requires minimal travel to support stakeholder engagements, governance activities, and business priorities.

• Lead the enterprise identity governance program, including governance frameworks, policies, standards, control requirements, and operational processes.
• Oversee access certification programs, including manager reviews, application owner attestations, remediation activities, and governance reporting.
• Govern identity lifecycle processes for joiners, movers, and leavers to ensure timely provisioning, modification, and deprovisioning of access.
• Direct access governance activities related to least privilege, role-based access controls, segregation of duties, privileged access oversight, and policy exception management.
• Partner with IAM Engineering and platform owners to define governance requirements, prioritize enhancements, improve workflows, and expand identity governance capabilities.
• Ensure governance processes support audit readiness through effective control execution, reporting, documentation, and evidence retention.
• Lead collaboration with business leaders, application owners, Risk, Compliance, Internal Audit, and Information Security teams to resolve governance issues and drive accountability.
• Monitor governance metrics, operational performance, service-level agreement compliance, and remediation activities to improve program maturity and reduce risk.

• Bachelor's degree and 7+ years of experience in identity and access management, identity governance, information security, IT risk and controls, or a related discipline.
• Experience managing identity governance programs, including access certifications, identity lifecycle governance, role management, access policy management, and segregation of duties controls.
• Experience with SailPoint Identity IQ, SailPoint Identity Security Cloud (Identity Now), or both.
• Knowledge of identity and access management principles, including least privilege, role-based access control, access provisioning and deprovisioning, audit requirements, and compliance controls.
• Experience leading cross-functional initiatives, governance programs, or operational teams within a complex enterprise environment.
• Experience leading and developing technical or governance teams.

• Experience leading SailPoint implementation, expansion, upgrade, optimization, or application onboarding initiatives.
• Experience supporting SOX, NIST, ISO 27001, or similar cybersecurity and control frameworks.
• Experience developing governance metrics, risk reporting, audit responses, and executive-level presentations.
• Experience collaborating with IAM engineering teams on integrations, provisioning workflows, identity data quality, connectors, and policy configuration.
• Professional certifications such as CISSP, CISM, CRISC, CISA, or SailPoint certifications.
• For Baccalaureate degrees earned outside of the United States, a degree that satisfies the requirements of 8 C.F.R. § 214.2(h)(4)(iii)(A) is required.

Physical Job Requirements The above statements are intended to describe the general nature and level of work being performed by employees assigned to this…