Manager Of Access Management And Information Security

For UCOP internal applicants, please login to the internal candidate gateway at:
Jobs at UCOP

Position Base

Riverside

Location

UCPath Center

UCPATH CENTER

UCPATH CENTER

At the University of California (UC), your contributions make a difference. A world leader producing Nobel and Pulitzer Prize recipients with over 150 years of groundbreaking research transforming the world. Choose a career where you can leverage your knowledge, skills and aspirations to inspire and support some of the greatest minds in the world, and those who will follow in their footsteps.

Working at the University of California is being part of a unique institution, and a vibrant and diverse community. At the University of California, Office of the President, we propel our mission through impactful work locally, in government centers and systemwide. We are passionate people, serving the greater good.

The University of California, one of the largest and most acclaimed institutions of higher learning in the world, is dedicated to excellence in teaching, research and public service. The University of California Office of the President is the headquarters to the 10 campuses, six academic medical centers and three national laboratories and enrolls premier students from California, the nation and the world.

Learn more about the UC Office of the President

UCPath is the University of California's shared services center in Riverside, CA. UCPath manages the payroll, benefits, and other human resources transactions for more than 265,000 UC employees working across ten UC campuses, six medical centers, three national labs and more. The staff at the UCPath Center work in a variety of areas including business operations, customer service, quality management, technology, training, human resources and communications.

Learn more about UCPath

The Manager of Information Security and Access Management is responsible for managing cross-functional enterprise access governance and information security activities. This role oversees the implementation, administration, and continuous improvement of enterprise access governance frameworks, identity and access management (IAM) controls, privileged access oversight, and institutional security compliance practices designed to safeguard organizational systems, applications, and sensitive institutional data. Reporting directly to the UCPath Executive Director, this position partners closely with UCPath and UCOP Information Technology, cybersecurity leadership, compliance stakeholders, and shared services operational teams to support alignment between enterprise access governance practices, institutional security policies, audit requirements, and cybersecurity standards.

The Manager leads cross-functional enterprise initiatives related to access governance, segregation of duties, privileged access management, security compliance monitoring, and cybersecurity risk mitigation. This role also serves as a key operational liaison supporting enterprise cybersecurity coordination efforts, including governance assessments, incident response coordination, security awareness, cyber preparedness, business continuity planning, disaster recovery coordination, and continuous improvement of enterprise security practices.

• 30% Access Management Oversight

  Create an Access Management Structure:
  Review and analyze current organizational structure and functions for managing access and recommend an appropriate functional structure for enterprise access management operations. Develop a cross-functional enterprise Access Management Plan:
  Review and update the existing Access Management Plan to ensure it conforms to industry standards and best practices in the area of access management and cyber security. Make revisions to the current plan as necessary to align with industry best practices. Ensure the plan aligns with Zero Trust principles, least privilege methodologies, cybersecurity risk management practices, and UC Information Security standards.
  
  Establish Compliance Framework:
  Create and enforce a framework, processes and procedures to ensure organization-wide adherence to the cross-functional enterprise Access Management Plan, including monitoring and auditing for non-compliance. Develop and maintain executive reporting metrics to monitor access governance maturity, segregation of duties violations, privileged access reviews, audit findings, and remediation activities. Manage Logical Access:
  Oversee logical…