Primary Responsibilities
IAM Product Strategy & Roadmap
- Define and maintain the multi-year IAM product strategy and modernization roadmap.
- Establish target-state capabilities for workforce IAM, client IAM, privileged access, authorization, machine identities, and identity intelligence.
- Partner with cybersecurity leadership to align IAM capabilities with regulatory requirements, risk management objectives, and business priorities.
- Evaluate emerging technologies and industry trends to continuously improve IAM capabilities.
- Create business cases, investment proposals, and strategic recommendations for IAM modernization initiatives.
Product Ownership & Capability Management
- Serve as the product owner for one or more strategic IAM platforms and services.
- Define product vision, objectives, roadmaps, and prioritized backlogs.
- Translate business, regulatory, security, and operational requirements into executable product capabilities.
- Partner with engineering teams to ensure successful delivery of roadmap commitments.
- Define adoption targets, value realization metrics, and product success criteria.
Automation & Engineering Enablement
- Lead the IAM automation strategy across identity lifecycle management, access governance, certification, auditing, privileged access, authorization, and security operations.
- Identify opportunities to reduce manual processing through workflow automation, orchestration, self-service capabilities, and intelligent controls.
- Drive adoption of automation platforms, governance workflows, and low-code/no-code orchestration capabilities.
- Partner with engineering teams to streamline onboarding, access requests, certifications, JML processes, and control execution.
- Develop automation strategies supporting workforce, client, machine, and AI-driven identities.
- Leverage tools such as Tines, Copilot, and AI Agents to improve operational efficiency and user experience.
- Create resilient, always-on automation capabilities to provide near 24x7 operational support and increase team productivity.
Identity Governance & Operational Excellence
- Establish measurable KPIs, KCIs, and KRIs for IAM products and services.
- Drive continual improvement of operational processes and user experience.
- Partner with operations teams to improve service reliability, scalability, and efficiency.
- Develop reporting, dashboards, and executive reporting packages.
- Ensure IAM capabilities maintain strong control effectiveness and audit readiness.
Strategic Programs & Transformation
- Lead automation of strategic modernization initiatives involving:
- Identity Governance & Administration (IGA)
- Privileged Access Management (PAM)
- Authentication Modernization
- Authorization Modernization
- Role Based Access Control (RBAC)
- Fine-Grained Authorization
- Machine Identity Governance
- Agent and AI Identity Governance
- SaaS Security Integration
- Identity Intelligence & Risk Analytics
- Coordinate across engineering, architecture, risk, cybersecurity, operations, and business stakeholders to ensure successful execution.
Governance, Risk & Regulatory Alignment
- Ensure IAM products align with enterprise standards, policies, and regulatory expectations.
- Support audits, examinations, and control reviews.
- Partner with Risk, Audit, Architecture, and Security organizations to define and maintain control requirements.
- Translate regulatory requirements into roadmap priorities and product capabilities.
- Maintain accountability for delivery of risk-reducing capabilities and control improvements.
Areas of Accountability
- IAM Product Portfolio Management
- IAM Strategy & Roadmaps
- Identity Governance Platforms
- Privileged Access Platforms
- Authentication & Authorization Products
- IAM Automation & Workflow Orchestration
- RBAC & Access Governance
- Identity Analytics & Reporting
- Machine Identity Governance
- AI & Agent Identity Governance
- IAM Metrics, KPIs, KCIs & KRIs
- Regulatory & Audit Readiness
- Continuous Improvement Programs
Required Experience
- 7+ years of experience in Identity & Access Management, Cybersecurity, Product Management, Security Engineering, or related technology disciplines.
- 3+ years leading strategic technology initiatives, product portfolios, or transformation programs.
- Experience with IAM platforms such as Saviynt, Okta, Entra ID, CyberArk, SailPoint, Ping, or equivalent technologies.
- Strong understanding of IAM disciplines including:
- Authentication
- Authorization
- Identity Governance
- Access Lifecycle Management
- RBAC
- OAuth/OIDC
- SAML
- MFA
- PAM
- Machine Identities
- Experience with automation and workflow platforms.
- Familiarity with regulatory frameworks including NIST, FFIEC, ISO 27001, NYDFS, and related financial services requirements.
Success Measures
- Successful delivery of IAM strategic roadmap objectives.
- Increased automation and reduction of manual IAM processes.
- Improved control effectiveness and regulatory readiness.
- Reduced operational risk and technical debt.
- Enhanced user and administrator experience.
- Increased adoption of IAM automation solutions, AI agents, Copilot use cases, and workflow platforms such as Tines.
- Increased operational resiliency through near 24x7 automated IAM capabilities.
- Quantifiable improvements in IAM KPIs, KCIs, and KRIs.
- Establishment of a scalable and sustainable identity control plane supporting workforce, client, machine, and AI identities.
