Director, Identity Security

Director Of Identity

The Director of Identity is responsible for maturing the enterprise Identity and Access Management (IAM) program across strategy, engineering, operations, architecture, and emerging identity security capabilities. This role provides leadership for a global IAM function supporting a large-scale internal and external identity environment and is accountable for advancing identity governance, privileged access, authentication, lifecycle management, and secrets and cryptography capabilities in alignment with business, risk, and compliance requirements.

The role combines strategic direction, operational accountability, organizational leadership, and program execution. The Director of Identity will lead mature identity services while driving transformation initiatives such as IAM governance maturation, role-based access control, PAM modernization, passwordless authentication, certificate lifecycle automation, and enterprise secrets management.

Strategy, Governance, and Leadership

• Define and own the enterprise IAM strategy, roadmap, and operating model aligned to cybersecurity, compliance, and business objectives.
• Mature the IAM program through formal governance, policies, standards, controls, metrics, and leadership reporting.
• Present IAM program status, risks, priorities, and investment needs to security leadership and executive stakeholders.
• Lead prioritization decisions across operations, platform engineering, architecture, and project-based identity initiatives.
• Establish and monitor KPIs, service performance, maturity goals, and program outcomes.

IAM Program Delivery

• Lead delivery of enterprise IAM capabilities including identity lifecycle management, joiner/mover/leaver processes, access provisioning, access requests, access reviews, privileged access, authentication, federation, and directory services.
• Oversee transformation initiatives such as IGA expansion, RBAC governance, PAM modernization, passwordless authentication, and identity security posture improvements.
• Ensure IAM services meet operational expectations for reliability, resilience, scalability, and user support.
• Partner with application, infrastructure, cloud, HR, audit, and security teams to implement identity controls and integration patterns across the enterprise.

Compliance, Risk, and Control Effectiveness

• Ensure IAM processes and controls support audit, regulatory, and internal compliance requirements, including SOX-related controls where applicable.
• Oversee audit readiness, remediation activities, control evidence, and policy enforcement across identity-related processes.
• Align identity capabilities to recognized frameworks and standards such as NIST CSF 2.0, NIST 800-63, and enterprise security policies.
• Reduce identity-related risk by strengthening governance, control automation, privileged access protections, and secrets management practices.

Architecture and Emerging Identity Security Capabilities

• Provide leadership across identity architecture, platform standards, and integration patterns for workforce, privileged, and customer identity environments.
• Lead the development of enterprise secrets and cryptography capabilities, including certificate lifecycle management, PKI modernization, vault strategy, and operational controls.
• Support modern identity approaches across hybrid and cloud environments, including federation, conditional access, and non-human/service identity considerations.
• Drive decisions on tooling, architectural direction, and strategic vendor partnerships that improve security, scalability, and operational efficiency.

Organizational and People Leadership

• Lead and develop a distributed IAM organization consisting of managers, architects, engineers, and operations personnel.
• Build organizational clarity across operations, engineering, architecture, and new capability areas.
• Provide leadership in talent development, succession planning, coaching, performance management, and team engagement.
• Manage staffing strategy across full-time employees, partners, and contingent resources to meet delivery needs.
• Oversee third-party vendors and consulting partners supporting IAM programs and services.