Remote Manager, Cybersecurity - Privileged Access Management

About the role

Stryker is hiring a remote Manager, Cybersecurity, Privileged Access Management. The PAM Manager leads the enterprise Privileged Access Management program, protecting privileged accounts, credentials, secrets and sessions across on-premises, cloud and hybrid environments. The role owns the PAM strategy and operating model, leads a team of analysts and works with Infrastructure, Cloud, Security Operations, Application and Audit teams to reduce privileged access risk and support regulatory compliance. Preference is given to candidates living in the Eastern or Central time zones.

Key responsibilities

• Own the enterprise PAM strategy, roadmap, engineering standards and operating model aligned with Zero Trust and least-privilege principles.
• Lead the deployment and operation of CyberArk, BeyondTrust or Delinea across privileged account, credential, secrets and session-management use cases.
• Manage the privileged account lifecycle, including provisioning, deprovisioning, vaulting, rotation and check-in/check-out for human and shared accounts.
• Implement privileged session monitoring and recording, just-in-time and time-bound access, and endpoint privilege management.
• Design and govern break-glass access procedures and manage third-party privileged access.
• Partner with Infrastructure, Cloud, Security Operations and Application teams to onboard privileged accounts and integrate PAM controls.
• Support SOX, HIPAA, ISO 27001 and NIST Cybersecurity Framework requirements through reporting and audit evidence.
• Lead PAM analysts by setting priorities, engineering standards, performance expectations and daily operating practices.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline.
• Minimum 8 years of experience in identity or cybersecurity, including at least 4 years focused on privileged access management.
• People-leadership or team-lead experience managing analysts or engineers.
• Preferred: Master's degree and a certification such as CyberArk Defender or Sentry, CISSP, BeyondTrust or Delinea, or formal training in privileged access management, identity security or Zero Trust.

Required skills

• Hands-on experience deploying and operating CyberArk, BeyondTrust or Delinea.
• Credential vaulting, privileged session management, just-in-time access, endpoint privilege management and secrets management.
• Securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform and on-premises environments.