Lead Director, Identity Governance and Administration

At CVS Health, we’re building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.

As the nation’s leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues – caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.

Position Summary

CVS Health has an exciting opportunity for a Lead Director, Identity Governance and Administration to join our dynamic team!

As the Lead Director you will be responsible for leading one of the Identity & Access Management (IAM) Engineering teams in Identity & Access Management within CVS Health’s Information Security and Technology Solutions (ISTS) organization. You will be responsible to defining, building and operating a large Engineering function focused on delivering cutting edge solutions in the Identity Governance & Administration (IGA) and automation space.
 

You will be a visionary leader responsible for shaping and executing a comprehensive enterprise-wide IAM strategy, with a focus on Identity Governance & Administration (IGA) and automation. You should have an exceptional track record in IAM and should have a good understanding of IAM technologies, concepts, policies, processes, best practices, and solutions. You should also be knowledgeable about broader information security functions, including how IAM Engineering respond and mitigate emerging threats.

Responsibilities include:

• Strategic Leadership: Develops and drives the IAM vision, aligning IGA and automation initiatives with enterprise security objectives and regulatory requirements.
• Team Leadership & Development: Leads a high-performing IAM team, fostering a culture of innovation, accountability, and continuous improvement. Provides mentorship and strategic direction to ensure operational excellence.
• Cross-Functional Collaboration: Partners with IT, legal, compliance, HR, and business units to define and enforce IAM policies, standards, and controls. Influences enterprise architecture and digital transformation efforts.
• Risk & Compliance Management: Conducts advanced risk assessments and oversees the implementation of controls to mitigate identity-related threats. Ensures compliance with internal policies and external regulations (e.g., SOX, PCI, HIPAA).
• Automation & Innovation: Champions the adoption of automation in IAM processes, including provisioning, de-provisioning, access reviews, and certification campaigns. Leverages AI/ML and orchestration tools to enhance efficiency and reduce manual effort.
• Incident Response & Monitoring: Oversees identity-related threat detection and response activities. Ensures timely investigation and resolution of IAM incidents and anomalies.
• Policy & Governance: Establishes and maintains IAM policies, procedures, and documentation aligned with industry best practices and audit requirements.
• Stakeholder Engagement: Serves as a trusted advisor to internal and external stakeholders, including auditors and regulators. Leads IAM-related audits, assessments, and strategic initiatives.
• Change & Release Management: Partners with relevant teams to ensure robust change and release management controls are implemented for both existing and new IAM systems.
• Thought Leadership: Stays abreast of emerging IAM technologies, threats, and trends. Drives continuous improvement and innovation in IAM capabilities.

The successful candidate will be experienced in managing and leading large IAM teams for a large enterprise and have demonstrated experience driving successful engineering initiatives building enterprise tools and solutions.

Required Qualifications

• 10+ years of experience in information security with an IAM focused expertise
• 7+ years of experience in IAM, IGA, and automation.
• 5+ years of experience leading large-scale IAM programs in complex and highly regulated environments.
• 5+ years of experience with the Sailpoint product suite.

Preferred Qualifications

• Strong execution and delivery skills, with a track record of successful project implementation.
• Exceptional problem-solving, decision-making, and analytical capabilities.
• Adept at business intelligence, collaboration, and fostering a growth mindset across teams.
• Strong verbal, written, and interpersonal communication skills.
• Knowledge and understanding of DevOps and DevSecOps principles.
• Industry relevant certifications (e.g., CISSP, CISM, or equivalent) strongly desired.