Senior Director, IAM & Cloud Governance

Roles and Responsibilities

• Own the identity governance strategy, operating model, and control standards; lead access certification, role lifecycle, and segregation-of-duties programs with clear accountability for control coverage, exception handling, and decision ownership.
• Develop the roadmap for SOX readiness and execute the plan to prepare the company for successful audit performance.
• Architect and deploy a comprehensive IAM technology platform to automate access orchestration, manage privileged access, establish appropriate guardrails for enterprise AI, monitor and manage machine identities, and own a robust IdP/MFA platform.
• Establish governance forums and escalation paths to resolve policy exceptions, toxic access combinations, and role-design conflicts.
• Chair the IT architecture review board, assessing technology design, cost, capabilities, and third-party risk management.
• Manage all public-cloud master accounts and subscriptions; monitor, assess, and optimize cost, least-privilege access, and access automation.
• Direct workflow, analytics, and reporting to surface access risk, measure control effectiveness, and prioritize remediation based on exposure.
• Manage risk exceptions and compensating controls when legacy systems, acquired businesses, or operational constraints prevent immediate compliance.
• Lead the evaluation and modernization of the identity governance platform, processes, and data quality to improve scalability, automation, and evidence integrity.
• Lead identity governance for M&A activities, managing environments where acquired technologies do not yet meet enterprise standards.

Job Requirements

• 8+ years of experience in information technology, with an emphasis on identity and access management, including 5+ years leading IAM teams at the manager, director, or higher level.
• Proven experience owning enterprise IAM strategy, including capital and operating budgets.
• Deep hands-on expertise across all aspects of a comprehensive IAM program.
• Experience managing hybrid environments that span on-premises or colocation infrastructure and at least one major cloud platform, such as AWS, Azure, or GCP.
• Deep knowledge of SOX compliance and a proven track record of building readiness programs that deliver successful outcomes.
• Experience with access automation, configuration management, and modern operations practices.
• Track record of building, leading, and retaining high-performing technical teams.
• Legally authorized to work in the United States.