Senior Director, Head of Identity and Access Management

Position Overview

As the Head of Identity and Access Management, this leader will play a pivotal role in ensuring the security and privacy of GEICO’s digital ecosystem while enabling smooth access for authorized users.

The Head of Identity and Access Management will be responsible for building a state-of-the-art Identity and Access Management platform that will interact seamlessly with the rest of GEICO’s new infrastructure environment to further the firm’s commitment to robust cybersecurity and seamless customer experiences.

They will also be responsible for establishing and executing a comprehensive IAM strategy that aligns with GEICO’s business goals, regulatory requirements, and industry best practices, and will collaborate closely with cross-functional teams to implement identity and access solutions that balance security with user convenience.

Key Responsibilities:

IAM Strategy and Planning:

• Developing and implementing IAM strategies and roadmaps
• Defining IAM policies, standards, and procedures
• Conducting risk assessments and identifying potential vulnerabilities
• Aligning IAM initiatives with business goals and compliance requirements

Identity Governance and Administration (IGA):

• Designing and managing enterprise-wide IGA programs
• Implementing access request and certification processes
• Ensuring compliance with regulatory frameworks and industry standards
• Managing user provisioning and deprovisioning workflows

Authentication and Authorization Technologies:

• Knowledge of various authentication methods (e.g., multi-factor authentication, single sign-on)
• Understanding of authorization concepts and frameworks (e.g., RBAC, ABAC)
• Experience with identity federation and identity as a service (IDaaS) platforms

Security Technologies and Standards:

• Familiarity with security protocols and standards (e.g., SAML, OAuth, OpenID Connect)
• Understanding of encryption, PKI, and digital certificates
• Knowledge of secure coding practices and secure software development lifecycle (SDLC)

Team Management, Collaboration and Communication:

• Leading a team of technical Identity and Access Management professionals, providing guidance, mentorship, and fostering a culture of innovation, collaboration and continuous improvement.
• Partnering with internal stakeholders to understand their access requirements and translate them into effective Identity and Access Management solutions. Ensuring Identity and Access Management practices align with regulatory requirements and security standards.

Quality Assurance and Compliance:

• Overseeing day-to-day operations of Identity and Access Management systems, including user provisioning, de-provisioning, authentication mechanisms, and role-based access controls and implementing monitoring and auditing processes to ensure compliance and detect anomalies.
• Developing and implementing Identity and Access Management-related incident response and risk mitigation strategies, as well as coordinating with GEICO’s incident response teams to promptly address security incidents and breaches related to identity and access.

Qualifications:

• Bachelor's or Master's degree in Electrical Engineering, Computer Engineering, or a related field. Advanced degree preferred.
• Experience with automation and orchestration tools, such as Ansible, Terraform, or Kubernetes, is valuable. Knowledge of Infrastructure as Code (IaC) principles and experience in automating deployment and management tasks in a hybrid cloud environment is beneficial.
• Proven experience in designing, building, and managing IAM platforms and systems in a complex enterprise environment leveraging Open Source technologies.
• Track record of defining and delivering a strategic roadmap for best-in-class capabilities across the Identity and Access Management space
• In-depth knowledge of IAM technologies, protocols, and standards, such as SSO, MFA, OAuth, and OpenID Connect.
• Familiarity with regulatory requirements related to identity and access management, such as GDPR, HIPAA, or SOX.
• Excellent communication and interpersonal skills, with the ability to partner and influence across multiple business and functional lines, up to Executive Committee. Able to present complex technical information to non-technical stakeholders.
• Exceptional leadership skills to inspire and support a high-performing technical team.

#LI-WB1

 

Annual Salary

$195,000.00 - $315,000.00

The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to b