Director, Privileged Access Management – Non-Human Identity

This is a fully remote position, open to applicants in United States, +8 more locations.

📋 Description

• Formulate and implement the enterprise strategy for Privileged Access Management and Non-Human Identity Security.

• Create and uphold a multi-year roadmap that aligns with Huntington's Identity Security strategy and cybersecurity goals.

• Foster ongoing advancements in privileged access management, service account governance, machine identity management, and credential security.

• Act as the senior accountable leader for PAM and Non-Human Identity Security capabilities.

• Generate business cases, investment proposals, and strategies for modernization.

• Set governance and operational standards for privileged access across the enterprise infrastructure, applications, cloud platforms, databases, and administrative systems.

• Supervise privileged account onboarding, credential vaulting, password rotation, privileged session monitoring, emergency access controls, and deprovisioning.

• Develop governance frameworks for service accounts, application identities, APIs, machine identities, workloads, automation platforms, and emerging AI identities.

• Direct centralized secrets management and credential governance.

• Lead and mentor managers, engineers, analysts, architects, and other identity professionals.

• Create succession plans and talent pipelines.

• Manage the remediation of high-risk PAM-related issues and findings.

• Collaborate with Risk, Compliance, and Internal Audit to uphold effective and defensible controls.

• Ensure audit readiness through comprehensive reporting, evidence gathering, inventory management, and documentation.

• Develop KPIs, KRIs, and executive-level reporting.

• Serve as the primary executive liaison for PAM and Non-Human Identity Security matters.

• Influence decisions related to architecture, engineering, cloud, infrastructure, application development, and business operations.

• Engage with executive leadership, cybersecurity leadership, regulators, auditors, and technology stakeholders.

• Perform additional duties as assigned.

⛳️ Requirements

• Bachelor’s Degree or 4+ years of equivalent experience.

• 10+ years of progressive experience in Identity Security, Identity & Access Management, Cybersecurity, Infrastructure Security, or related fields.

• 5+ years of experience in leading managers, engineering teams, cybersecurity teams, or identity programs.

• Preferred: Experience in financial services, banking, or other highly regulated industries.

• Preferred: Familiarity with operating within the Three-Lines Model.

• Preferred: Experience with Privileged Access Management platforms and practices.

• Preferred: Knowledge of service account governance, machine identity management, secrets management, and native cloud identity security.

• Preferred: Experience implementing Zero Trust, Just-In-Time (JIT) access, or Zero Standing Privilege controls.

• Preferred: Proven track record of building and advancing Identity Security organizations.

🏝️ Benefits

• Incentive compensation plan.

• Health insurance coverage.

• Wellness program.

• Life and disability insurance.

• Retirement savings plan.

• Paid leave programs.

• Paid holidays.

• Paid time off (PTO).

• Remote work arrangement.

• Opportunity for remote roles to convene in offices for important gatherings.