Excited to grow your career?

BBVA is a global company with more than 160 years of history that operates in more than 25 countries where we serve more than 80 million customers. We are more than 121,000 professionals working in multidisciplinary teams with profiles as diverse as financiers, legal experts, data scientists, developers, engineers and designers.

About the job:

Role Overview

This dual role is based in CIB US and reports to the Head of Corporate Security in the US. It combines leadership of Identity and Access Management (IAM) with oversight of Physical Security strategy across BBVA CIB USA operations.

Identity and Access Management (IAM)

The IAM Senior Manager is responsible for defining, establishing, maintaining, and governing identities and access across the organization. This includes assessing business access requirements and ensuring that access to systems and applications is provisioned, maintained, and revoked in accordance with robust security principles, engineering standards, and corporate governance frameworks.

The role works closely with IT, cybersecurity operations and incident response, business units, and third-party partners. It drives identity provisioning, access governance, and the implementation of Single Sign-On (SSO) and Multi-Factor Authentication (MFA), ensuring alignment with corporate standards for user and privileged access.

Physical Security

In parallel, the role sets the strategy and drives execution of a risk-based physical security program for BBVA CIB USA across offices in New York, Houston, and Miami. As BBVA operates as a tenant, this responsibility is delivered through strong coordination with building management and external security providers, ensuring the protection of people, facilities, and material nonpublic information (MNPI), while supporting business operations in trading floors and other mission-critical environments.

Responsibilities include defining policies, governance, and technology decisions; leading incident preparedness and response; and overseeing coordination with landlord-managed guard services and other third-party providers. The role ensures transparent reporting to senior management and relevant Security and Risk Committees.

Performance will be measured through risk reduction, system reliability, operational excellence, and regulatory readiness, including:

• Incident rate reduction

• Effective security coverage through third-party providers

• Premises and building uptime

• Credential issuance SLAs

• Audit action closure

Leadership & Strategic Alignment

This role requires a strong risk management strategist profile, with a deep understanding of physical security, identity security, business operations, and the evolving threat landscape across both physical and digital domains. It acts as a key liaison across identity security, physical security, business continuity, and regulatory compliance, in close coordination with cybersecurity, IT, risk management, and external stakeholders such as building management.

Identity and Access Management Duties

• Lead the implementation of Corporate Governance for User Access Management across all business systems within the scope of BBVA CIB US.

• Drive the implementation of the Privileged Access Management (PAM) program, ensuring full alignment with corporate governance standards for the management of privileged access.

• Act as a key liaison between local engineering teams and the CIB Corporate Identity Security function, including the Profiling Office, RPA, and Authorizations units.

• Lead and develop the IAM function across governance, policies, and technology solutions, including Single Sign-On (SSO), directories, certificates, Multi-Factor Authentication (MFA), and privileged account management.

• Oversee periodic access reviews and certification processes to ensure appropriate access to business systems and unstructured data.

• Manage user access across internal systems and external entities, coordinating with local and global security and IT operations to ensure effective end-to-end access lifecycle management (provisioning, modification, and deprovisioning).

• Deliver IAM projects on time and within budget, ensuring alignment with business and security objectives.

• Implement authentication, authorization, and federation capabilities with the BBVA Identity Provider to enable seamless SSO and MFA across business systems.

• Partner with business units to understand access requirements and provide IAM solutions that align with operational needs and security standards.

• Lead the adoption