ROLES AND RESPONSIBILITIES - Own the identity governance strategy, operating model, and control standards; lead access certification, role lifecycle, and segregation-of-duties programs with clear accountability for control coverage, exception handling, and decision ownership. - Develop the roadmap for SOX readiness and execute the plan to prepare the company for successful audit performance. - Architect and deploy a comprehensive IAM technology platform to automate access orchestration, manage privileged access, establish appropriate guardrails for enterprise AI, monitor and manage machine identities, and own a robust IdP/MFA platform. - Establish governance forums and escalation paths to resolve policy exceptions, toxic access combinations, and role-design conflicts. - Chair the IT architecture review board, assessing technology design, cost, capabilities, and third-party risk management. - Manage all public-cloud master accounts and subscriptions; monitor, assess, and optimize cost, least-privilege access, and access automation. - Direct workflow, analytics, and reporting to surface access risk, measure control effectiveness, and prioritize remediation based on exposure. - Manage risk exceptions and compensating controls when legacy systems, acquired businesses, or operational constraints prevent immediate compliance. - Lead the evaluation and modernization of the identity governance platform, processes, and data quality to improve scalability, automation, and evidence integrity. - Lead identity governance for M&A activities, managing environments where acquired technologies do not yet meet enterprise standards. JOB REQUIREMENTS - 8+ years of experience in information technology, with an emphasis on identity and access management, including 5+ years leading IAM teams at the manager, director, or higher level. - Proven experience owning enterprise IAM strategy, including capital and operating budgets. - Deep hands-on expertise across all aspects of a comprehensive IAM program. - Experience managing hybrid environments that span on-premises or colocation infrastructure and at least one major cloud platform, such as AWS, Azure, or GCP. - Deep knowledge of SOX compliance and a proven track record of building readiness programs that deliver successful outcomes. - Experience with access automation, configuration management, and modern operations practices. - Track record of building, leading, and retaining high-performing technical teams. - Legally authorized to work in the United States.