Director, Identity and Access Management

This is a fully remote position, open to applicants in Arizona, +5 more states.

📋 Description

• Formulate and implement strategic information security initiatives.

• Oversee information security risk evaluations and assess security challenges along with available controls.

• Deliver training and guidance internally as well as with direct partners or third parties managing sensitive information.

• Supervise the creation of information security process policies.

• Ensure adherence to established change control protocols, which include system and software testing.

• Lead security-related activities in business projects supporting information security programs, encompassing third-party vendor management, security GRC, and identity and access initiatives.

• Act as an information security advisor for the organization and its direct partners.

• Manage risks linked to third-party handling of information assets and service delivery.

• Assess security requirements and recommend products and services that address those needs.

• Assist in regulatory and corporate compliance efforts pertaining to GLBA, PCI, and SOX.

• Adhere to all stipulations of the Bank Security Act.

• Oversee personnel management tasks, including recruiting, training, delegating duties, setting objectives, evaluating performance, and addressing employee-related concerns.

• Carry out additional responsibilities as assigned.

⛳️ Requirements

• Bachelor’s degree or equivalent education and professional experience.

• Generally, 8+ years of experience with a bachelor's degree or equivalent.

• Proficient in application security, identity and access management, security governance, risk, and compliance (GRC), as well as security assessments.

• Familiarity with the requirements of the Gramm-Leach-Bliley Act (GLBA), Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), and the Bank Security Act.

• Experience in managing information security risk assessments and analyzing security controls.

• Proven experience in developing information security policies.

• Background in managing change control processes, which include system and software testing.

• Experience in overseeing third-party/vendor security risks.

• Proven track record in supervising, hiring, training, assigning, and directing work.

🏝️ Benefits

• Annual performance-based incentive opportunities.

• Health insurance coverage.

• 401(k) retirement plan benefits.

• Life insurance protection.

• Disability benefits.

• Paid time off.

• Comprehensive benefits package.