Identity Governance & Administration (IGA) Leader

What You Wil Do:

We are seeking an experienced Identity & Access Management (IAM) Leader to build and lead our enterprise IAM function. Reporting to the Chief Information Security Officer (CISO), this roleis responsible forIAM strategy, architecture, delivery, and operations across workforce, customer, and non-human identities.

This leader will define the IAM vision and roadmap, oversee key identity transformation initiatives, manage vendors and delivery partners, and lead a globally distributed team in a complex, matrixed environment.

Strategy, Vision & Organizational Leadership

• Define and lead the enterprise IAM strategy, operating model, and roadmap aligned to business, risk, and regulatory priorities.Build and scale the IAM organization to include team structure and hiring plans.

• Partner acrossCybersecurity, IT, HR, Legal, Privacy, Risk, Internal Audit, and business teams to deliver consistent identity outcomes.

• Oversee major IAM transformation initiatives, including program executionand budget accountability.

• Establish metrics and reporting to demonstrate program maturity, business value, and risk reduction.

Identity Governance & Administration (IGA)

• Lead the design and maturity of Identity Governance and Administration capabilities, including lifecycle management, access requests, certifications, role management, and separation of duties.

• Drive the strategy, implementation, and maturation of enterprise IGA capabilities using platforms such as SailPoint, Microsoft Entra ID Governance, or similar solutions.

• Advance least-privilege and Zero Trust principles across enterprise applications, platforms, and cloud environments.

• Oversee identity lifecycle management for workforce, contractors, partners, and non-human identities.

Privileged Access Management (PAM)

• Lead the strategy and maturity of the firm’s Privileged Access Management program, including vaulting, credential management, session controls, and privileged access governance.

• Provide strategic leadership for PAM capabilities and related tooling, including platforms such asDelinea, CyberArk, or similar solutions.

• Establish standards for privileged access,secretsmanagement, and just-in-time elevation across human and machine identities.

• Reduce standing privilege across hybrid environments and track progress through measurable controls.

Authentication, SSO & Federation

• Lead enterprise authentication and access capabilities, including SSO, MFA, conditional access, federation, and modern authentication methods.

• Support modern identity and access patterns through technologies such as Microsoft Entra ID and related federation and access governance capabilities.

• Support secure identity patterns for employees, clients, partners, and external platforms as needed.

Cloud & Workload Identity

• Drive identity standards for cloud and workload access acrossGuidehouse’shybrid and multi-cloud environments.

• Partner with infrastructure, cloud, and engineering teams to embed identity and access controls into platforms and delivery processes.

• Establish guardrails andmonitoring forentitlements and permissions across enterprise technology environments.

Risk, Compliance & Audit

• Align IAM capabilities to security, compliance, and audit requirements across applicable regulatory and control frameworks.

• Partner with compliance and audit stakeholders to support control evidence, remediation, and sustainable governance processes.

• Support identity requirements for both internal operations and client-serving environments as needed.

People Leadership

• Lead, coach, and develop a team spanning IAM architecture, engineering, operations, and governance.

• Build a culture of accountability, service excellence, and continuous improvement.

• Represent the IAM function with senior leadership and key stakeholders across the enterprise.

What You Will Need:

What Would Be Nice to Have:

• Degree in Computer Science, Information Systems, Cybersecurity, ora relatedfield.

• Experience inaprofessionalservices or other complex enterpriseenvironment.

• Relevant industry certifications such as CISSP, CISM, or IAM-related certifications.