Senior Director, IAM & Cloud Governance

Roles and Responsibilities

• Own the identity governance strategy, operating model, and control standards; lead access certification, role lifecycle, and segregation-of-duties programs with clear accountability for control coverage, exception handling, and decision ownership.

• Develop the roadmap for SOX readiness and execute the plan to prepare the company for successful audit performance.

• Architect and deploy a comprehensive IAM technology platform to automate access orchestration, manage privileged access, establish appropriate guardrails for enterprise AI, monitor and manage machine identities, and own a robust IdP/MFA platform.

• Establish governance forums and escalation paths to resolve policy exceptions, toxic access combinations, and role-design conflicts.

• Chair the IT architecture review board, assessing technology design, cost, capabilities, and third-party risk management.

• Manage all public-cloud master accounts and subscriptions; monitor, assess, and optimize cost, least-privilege access, and access automation.

• Direct workflow, analytics, and reporting to surface access risk, measure control effectiveness, and prioritize remediation based on exposure.

• Manage risk exceptions and compensating controls when legacy systems, acquired businesses, or operational constraints prevent immediate compliance.

• Lead the evaluation and modernization of the identity governance platform, processes, and data quality to improve scalability, automation, and evidence integrity.

• Lead identity governance for M&A activities, managing environments where acquired technologies do not yet meet enterprise standards.

• 8+ years of experience in information technology, with an emphasis on identity and access management, including 5+ years leading IAM teams at the manager, director, or higher level.

• Proven experience owning enterprise IAM strategy, including capital and operating budgets.

• Deep hands‑on expertise across all aspects of a comprehensive IAM program.

• Experience managing hybrid environments that span on-premises or colocation infrastructure and at least one major cloud platform, such as AWS, Azure, or GCP.

• Deep knowledge of SOX compliance and a proven track record of building readiness programs that deliver successful outcomes.

• Experience with access automation, configuration management, and modern operations practices.

• Track record of building, leading, and retaining high‑performing technical teams.

• Legally authorized to work in the United States.