Senior Director, IAM & Cloud Governance

ROLES AND RESPONSIBILITIES • Own the identity governance strategy, operating model, and control standards; lead access certification, role lifecycle, and segregation-of-duties programs with clear accountability for control coverage, exception handling, and decision ownership. • Develop the roadmap for SOX readiness and execute the plan to prepare the company for successful audit performance. • Architect and deploy a comprehensive IAM technology platform to automate access orchestration, manage privileged access, establish appropriate guardrails for enterprise AI, monitor and manage machine identities, and own a robust IdP/MFA platform. • Establish governance forums and escalation paths to resolve policy exceptions, toxic access combinations, and role-design conflicts. • Chair the IT architecture review board, assessing technology design, cost, capabilities, and third-party risk management. • Manage all public-cloud master accounts and subscriptions; monitor, assess, and optimize cost, least-privilege access, and access automation. • Direct workflow, analytics, and reporting to surface access risk, measure control effectiveness, and prioritize remediation based on exposure. • Manage risk exceptions and compensating controls when legacy systems, acquired businesses, or operational constraints prevent immediate compliance. • Lead the evaluation and modernization of the identity governance platform, processes, and data quality to improve scalability, automation, and evidence integrity. • Lead identity governance for M&A activities, managing environments where acquired technologies do not yet meet enterprise standards. JOB REQUIREMENTS • 8+ years of experience in information technology, with an emphasis on identity and access management, including 5+ years leading IAM teams at the manager, director, or higher level. • Proven experience owning enterprise IAM strategy, including capital and operating budgets. • Deep hands-on expertise across all aspects of a comprehensive IAM program. • Experience managing hybrid environments that span on-premises or colocation infrastructure and at least one major cloud platform, such as AWS, Azure, or GCP. • Deep knowledge of SOX compliance and a proven track record of building readiness programs that deliver successful outcomes. • Experience with access automation, configuration management, and modern operations practices. • Track record of building, leading, and retaining high-performing technical teams. • Legally authorized to work in the United States.