Senior Director, Identity, Cybersecurity Governance & Risk

About the role

The Senior Director, Identity, Cybersecurity Governance & Risk leads enterprise Identity and Access Management (IAM) and the overall cybersecurity governance framework. This senior leader drives strategy, implementation, and continuous improvement while partnering with IT, legal, compliance, and business units.

Key responsibilities

• Define and execute a multi‑year IAM strategy, roadmap, architecture, operating model and governance framework.
• Oversee implementation and operation of IAM capabilities such as IGA, IVIP, SSO, MFA, PAM, access provisioning, recertification and identity lifecycle management.
• Establish enterprise standards for authentication, authorization, least‑privilege, role‑based and privileged access, and joiner/mover/leaver processes.
• Drive automation and modernization of access administration to improve security, user experience and efficiency.
• Manage IAM vendor relationships, implementation partners and service providers.
• Develop and maintain the enterprise cybersecurity governance and risk management framework, policies, standards and control requirements.
• Partner with Enterprise Risk Management and executive leadership to align cybersecurity risk with enterprise risk appetite.
• Maintain the cybersecurity risk register, ensure clear ownership, remediation plans and executive visibility.

Required profile

• Proven senior cybersecurity leadership experience, preferably in a director or higher role.
• Strong strategic leadership and ability to translate technical risk into clear business terms.
• Extensive experience managing IAM programs and cybersecurity governance initiatives.
• Demonstrated ability to work cross‑functionally with IT, legal, compliance, audit and business leaders.
• Excellent communication and executive reporting skills.

Required skills

• Identity Governance and Administration (IGA)
• Identity Verification and Provisioning (IVIP)
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Privileged Access Management (PAM)