Director, Privileged Access Management and Non-Human Identity

Description

This is a remote role - preferred EST or CST candidates.

Summary:

Huntington is seeking a strategic and transformational leader to serve as Director of Privileged Access Management (PAM) and Non-Human Identity Security.

This leader will own the strategy, governance, engineering, operation, and continuous improvement of the bank's privileged access and non-human identity capabilities. The role is responsible for protecting the organization's most sensitive identities, credentials, accounts, systems, and administrative functions by ensuring privileged access is appropriately governed, monitored, controlled, and continuously improved. The Director will lead teams responsible for privileged user identities, service accounts, machine identities, application identities, secrets management, credential lifecycle management, privileged session controls, and non-human identity governance.

The position will establish the strategic direction of the capability while ensuring delivery of operational objectives, risk reduction initiatives, regulatory commitments, and modernization efforts.

This role partners extensively with Cybersecurity, Infrastructure Engineering, Application Development, Architecture, Technology Operations, Enterprise Risk Management, Audit, and business stakeholders to establish secure, scalable, and compliant privileged access capabilities across the enterprise. The successful candidate will possess a deep understanding of Identity Security, strong leadership and organizational development capabilities, and the ability to translate complex security and regulatory requirements into practical solutions that enable the business while reducing risk.

Duties and Responsibilities:

+ Strategic Leadership

+ Develop and execute the enterprise strategy for Privileged Access Management and Non-Human Identity Security.

+ Define and maintain a multi-year roadmap aligned to Huntington's Identity Security strategy and cybersecurity objectives.

+ Drive continuous maturity improvement across privileged access management, service account governance, machine identity management, and credential security.

+ Serve as the senior accountable leader for PAM and Non-Human Identity Security capabilities.

+ Develop business cases, investment proposals, and modernization strategies that improve control effectiveness and reduce risk.

+ Privileged Access Management

+ Establish governance and operational standards for privileged access across enterprise infrastructure, applications, cloud platforms, databases, and administrative systems.

+ Ensure privileged access follows least privilege, Just-In-Time access, and Zero Standing Privilege principles where appropriate.

+ Oversee privileged account onboarding, credential vaulting, password rotation, privileged session monitoring, emergency access controls, and deprovisioning processes.

+ Drive continuous improvement in privileged access controls, analytics, monitoring, and reporting.

+ Non-Human Identity Security

+ Establish governance frameworks for service accounts, application identities, APIs, machine identities, workloads, automation platforms, and emerging AI identities.

+ Develop ownership, lifecycle management, authentication, authorization, credential protection, monitoring, and review requirements for non-human identities.

+ Lead efforts to centralize secrets management and credential governance.

+ Define controls supporting the adoption of emerging technologies, cloud platforms, and AI-enabled systems.

+ Organizational Leadership

+ Lead and develop managers, engineers, analysts, architects, and other identity professionals supporting the capability.

+ Create a high-performing culture focused on accountability, partnership, execution, and continuous improvement.

+ Develop succession plans and talent pipelines for critical Identity Security roles.

+ Establish clear objectives, performance expectations, and career development opportunities for team members.

+ Risk, Audit & Regulatory Engagement

+ Own and drive remediation of any PAM-related high-risk issues and findings.

+ Partner closely with Three-Lines, including Risk, Compliance, and Internal Audit to ensure privileged access controls remain effective and defensible.

+ Ensure the capability remains audit-ready with appropriate reporting, evidence, inventory management, and documentation.

+ Develop KPIs, KRIs, and executive reporting that demonstrate program effectiveness and risk reduction.

+ Stakeholder Management

+ Serve as the primary executive…