IT Controls and Access Governance Manager

Description Ready to join a team that’s all in? At Imprivata, we deliver unified access and security management programs that eliminate friction, empowering healthcare and mission-critical organizations to work smarter, faster, and more securely.

We believe work can be more than a job or task—it’s a collective spirit; the type that emboldens creativity, embraces challenge, and fosters excitement. We are constantly raising the bar on what’s possible, owning the outcome of our triumphs and trials, staying nimble amidst change, and cultivating an environment where we win together. Here, your ideas matter, your differences are celebrated, and your work drives real results—for your career, your teammates, and our customers.

When you join Imprivata, you embark on a shared journey of ambition and growth. We’re committed to building an inclusive workplace where everyone feels valued and supported. If you’re looking for a place to match your passion with purpose—and where every day you can make an impact—you’ll find it here.

We are seeking an IT Support and Access Governance Manager to join our team. This is a hybrid opportunity based in our Waltham, MA office.

Job Summary The IT Controls and Access Governance Manager is responsible for building and operating Imprivata’s IT-owned access governance and controls program across systems, services and sensitive data. The role partners closely with the CISO and Security organization, system administrators, application owners, Finance, Legal, Internal Audit and external auditors to translate security and compliance requirements into executable IT processes, reliable evidence and measurable remediation.

The manager establishes a repeatable, risk-based control framework across the application portfolio, beginning with higher-risk systems. The role operates the governance process across Security, IT, and the business by maintaining the control system of record, coordinating access reviews and certifications, measuring control performance, tracking exceptions and remediation, escalating deficiencies, and helping ensure approved access is implemented and auditable. The manager partners closely with Security, which owns security policy, risk appetite, and control objectives;

IT, which owns technical implementation, administration, service operations, and remediation; and business stakeholders, who define the operational needs that access and controls must support.

Duties and Responsibilities Build and continuously improve an enterprise access governance and IT controls program spanning SaaS applications, infrastructure, developer platforms, data services and other technology-enabled business processes.

Create and maintain a risk-based inventory of in-scope systems, data types, privileged roles, access paths, control owners, review frequencies, evidence requirements and remediation expectations.

Assess each system’s data risk, access model and control maturity; document gaps; prioritize remediation; and develop practical roadmaps with system administrators and business owners.

Design and operate recurring access review and certification processes, including executive and application-owner summaries that require validation of user access, privileged access, service accounts, roles, entitlements and exceptions.

Support the CISO in translating security requirements into access standards for sensitive and regulated data, including alignment with Data Security Posture Management (DSPM) findings; maintain standards and facilitate review and approval while Security retains policy and control-objective ownership and IT retains implementation ownership.

Lead the initial governance rollout using risk-based prioritization that considers systems supporting financial…