Director, Identity and Access Management

Company Overview

Docusign brings agreements to life. Over 1.5 million customers and more than a billion people in over 180 countries use Docusign solutions to accelerate the process of doing business and simplify people's lives. With intelligent agreement management, Docusign unleashes business-critical data that is trapped inside of documents. Until now, these were disconnected from business systems of record, costing businesses time, money, and opportunity.

Using Docusign's Intelligent Agreement Management platform, companies can create, commit, and manage agreements with solutions created by the #1 company in e-signature and contract lifecycle management (CLM).

Reporting directly to Docusign's Chief Information Security Officer, the Senior Manager, Identity and Access Management will be a strategic and product-focused leader responsible for designing and executing comprehensive, enterprise-wide strategies for identity and access management  Senior Manager will lead a small Identity and Access Management team within the Security organization which serves as the center of a hub and spoke model for the company.

This team will set company policy and standards and work with cross-functional leaders and identity and access management resources (e.g., in IT, Engineering, etc.) to ensure the effective implementation of best practices across the enterprise.

This position is a people manager role reporting to the Group Vice President, Chief Information Security Officer.

• Develop and execute the organization's identity and access management strategy and standards, aligning with overall business objectives, digital transformation initiatives, and product and enterprise security requirements
• Build a high-performing, product-driven team focused on measurable outcomes and continuous improvement. Lead and mentor members of the identity and access management team
• Define, deliver, and continuously evolve identity and access management best practices
• Collaborate with cross-functional identity and access management teams to implement secure best practices, ensuring proper management of user accounts and permissions, appropriately tailored access policies and processes, effective management platform and solution evaluations, and validation of efficacy of the program and controls
• Operationalize governance and guardrails for identity and access management, ensuring safe and compliant use across the organization
• Drive automation efforts to reduce the likelihood of human error, create efficiencies at scale, and optimize workflows
• Advise on opportunities to embed best practices and features for identity and access management into Docusign products; advise on opportunities to embed best practices and features for identity and access management from Docusign products into company business practices
• Translate technical risk and opportunities into business impact, providing clear updates, trade-off discussions, and recommendations to executives
• Ensure practices meet internal security standards, industry frameworks, and regulatory requirements
• Define measurable success criteria and report outcomes to leadership
• Collaborate with customer-facing security teams to support security assurance activities where required

Remote: Employee is not required to be in or near an office frequently and works from a designated remote work location for the majority of the time.

Positions at Docusign are assigned a job designation of either In Office, Hybrid or Remote and are specific to the role/job. Preferred job designations are not guaranteed when changing positions within Docusign. Docusign reserves the right to change a position's job designation depending on business needs and as permitted by local law.

• 8+ years in identity and access management or related security disciplines, with 6+ years in leadership roles
• Bachelor's degree in computer science, data science, cybersecurity, risk management, artificial intelligence, machine learning, or a related technical field
• Experience designing and leading identity and access management programs
• Experience with product security, including secure development lifecycle and CI/CD best practices, and identity and access management risks and mitigation measures
• Experience with enterprise security, including risk mitigation and governance of identity and access management issues relating to business processes, objectives, emerging technologies, AI and ML, and CRM, ERP, HRM, and other business workflows
• Experience with threats presented through the exploitation of identity and access management risks and substantive experience working with threat intelligence, CSIRT, PSIRT, Product, and Engineering teams to combat such risks
• Experience in data governance and security, including implementation of data governance and security frameworks, business initiatives to leverage data, and data security best practices relating to identity and access management, attack surface…