Director of Information Security & Risk Management

Responsibilities also include:

• Overseeing quarterly access reviews (Fiber ARC).
• Managing Business-as-Usual (BAU) tasks for existing IAM tools and services, including architectures.
• Knowledge of Oracle Access Manager (OAM).

Healthcare experience is a plus, but strong leadership experience within a highly regulated industry (e.g., banking, healthcare) is more critical.

• Strategic Leadership
• Define and drive the IAM vision, strategy, and roadmap aligned with enterprise security goals
• Lead cross-functional initiatives to improve identity governance and access controls
• Influence executive stakeholders and communicate IAM priorities across the organization
• Technical Expertise
• Understanding of IAM technologies: SSO, MFA, PAM, IGA, directory services, and federation protocols (e.g., SAML, OAuth, OpenID Connect)
• Experience with IAM platforms (e.g., SailPoint, Azure AD, CyberArk, OAM, RACF)
• Knowledge of cloud IAM (Google Cloud Platform) and hybrid environments
• Familiarity with regulatory frameworks (e.g., SOX, HIPAA, GDPR, NIST, ISO 27001)
• Operational Oversight
• Oversee provisioning/deprovisioning processes, access reviews, and role-based access controls (RBAC)
• Ensure timely resolution of IAM-related incidents and service requests
• Monitor and report on IAM metrics, compliance, and audit readiness
• Team & Vendor Management
• Build and lead a high-performing IAM team (architects, engineers, analysts)
• Manage vendor relationships and evaluate third-party IAM solutions
• Develop training and awareness programs for IAM best practices
• Risk & Compliance
• Identify and mitigate identity-related risks across systems and applications
• Ensure alignment with internal policies and external compliance requirements
• Support internal and external audits with evidence and documentation
• Integration & Architecture
• Collaborate with enterprise architects to ensure IAM fits into broader IT and security architecture
• Lead integration of IAM with HR systems, ERP, CRM, and other business platforms
• Drive automation and scalability of IAM processes
• Innovation & Continuous Improvement
• Stay current with emerging IAM trends, threats, and technologies (AI, etc)
• Champion innovation in identity lifecycle management and zero trust initiatives
• Continuously assess and improve IAM maturity across the organization