Senior Manager, Identity & Access Management

An Identity and Access Management Architect will be responsible for designing, implementing, and maintaining a comprehensive IAM system to ensure secure and efficient access to digital resources within the organization/s. You will play a crucial role in protecting sensitive data, ensuring compliance with regulatory requirements, and enabling seamless user experiences. The IAM Architect will play a vital role in maintaining the security and compliance of an organization's digital assets and ensuring that the right people have the right access at the right time. In summary, an IAM Architect will be responsible for designing, implementing, and maintaining a robust IAM system to protect an organization's digital assets and ensure secure and efficient access for authorized users.

• Identity and Access Management Strategy**: Develop and execute a comprehensive IAM strategy aligned with our security goals and business requirements.

• IAM System Design**: Design and architect IAM systems, including user authentication, authorization, and directory services, to support our requirements.

• User Provisioning and De-provisioning**: Establish automated processes for onboarding and offboarding users, ensuring that access is granted, modified, or revoked in a timely and secure manner.

• Access Control Policies**: Define and enforce access control policies, role-based access controls (RBAC), and least privilege principles to restrict unauthorized access.

• Single Sign-On (SSO)**: Implement SSO solutions to simplify user authentication and enhance user experience while maintaining security.

• Multi-Factor Authentication (MFA)**: Deploy MFA solutions to add an extra layer of security for user authentication.

• Password Management**: Oversee password policies, including complexity, expiration, and self-service password reset mechanisms.

• Privileged Access Management (PAM):** Manage and secure privileged accounts and access to sensitive systems and data.

• Directory Services**: Manage and maintain directory services like LDAP, Active Directory, or cloud-based directory services.

• Compliance and Auditing**: Ensure that IAM practices align with industry regulations, internal policies, and compliance standards. Regulaly conduct access audits and provide reports.

• Security Incident Response**: Develop incident response plans for IAM-related security breaches and participate in remediation efforts.

• Vendor and Tool Selection**: Evaluate, select, and integrate IAM solutions and tools that fit our organization's needs.

• User Training and Awareness**: Educate users and IT staff about security best practices, IAM policies, and the importance of securing their identities and access.

• Integration: ** Integrate IAM systems with other security tools and platforms, such as SIEM (Security Information and Event Management) systems and identity providers.

• Collaboration and Communication**: Collaborate with IT teams, security teams, and business units to align IAM initiatives with broader organizational goals.

• Documentation**: Maintain detailed documentation of IAM processes, configurations, and procedures.

• Security Awareness**: Stay current with evolving security threats and IAM best practices by continuously researching and adapting security measures.

Qualifications

• Bachelor's degree in computer science, Information Security, or a related field (Master's degree preferred).
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).
• Several years of experience in IAM, with a strong understanding of access control, identity management, and security principles.
• Proficiency in IAM tools and technologies.
• Knowledge of regulatory compliance standards (e.g., GDPR, HIPAA, NIST) and their implications for IAM.
• Strong analytical, problem-solving, and communication skills
• Knowledge of industry best practices and emerging IAM trends.
• Exceptional attention to detail and a commitment to maintaining security.

Competencies
Accountability for Results - Stay focused on key strategic objectives, be accountable for high standards of performance, and take an active role in leading change.
Strategic Thinking & Problem Solving - Make decisions considering the long-term impact to customers, patients, employees, and the business.
Patient & Customer Centricity - Maintain an ongoing focus on the