Manager, Cybersecurity, Privileged Access Management

This is a fully remote position, open to applicants in Michigan.

📋 Description

• Spearhead Stryker’s enterprise Privileged Access Management initiative.

• Take ownership of the PAM strategy, roadmap, engineering standards, and operational model in alignment with Zero Trust and least-privilege principles.

• Direct the implementation and management of CyberArk, BeyondTrust, or Delinea for privileged account, credential, secrets, and session-management applications.

• Oversee the privileged account lifecycle, encompassing provisioning, deprovisioning, vaulting, rotation, and check-in/check-out processes.

• Execute privileged session monitoring and recording, as well as just-in-time and time-bound access, alongside endpoint privilege management.

• Design and regulate break-glass access protocols with appropriate approval and audit controls.

• Manage brokered, monitored, and time-restricted third-party privileged access.

• Collaborate with Infrastructure, Cloud, Security Operations, and Application teams to onboard privileged accounts and incorporate PAM controls.

• Ensure compliance with SOX, HIPAA, ISO 27001, and NIST Cybersecurity Framework requirements through reporting and audit documentation.

• Lead PAM analysts by establishing priorities, engineering standards, performance expectations, and daily operational practices.

• Evaluate privileged access risks and address intricate identity-security challenges.

• Convert PAM risks, control requirements, and implementation decisions into actionable guidance for technical teams, business partners, and auditors.

⛳️ Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration, or a related field.

• At least 8 years of experience in identity management or cybersecurity, including a minimum of 4 years dedicated to privileged access management.

• Practical experience in deploying and operating CyberArk, BeyondTrust, or Delinea.

• Familiarity with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management.

• Expertise in securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments.

• Experience in people leadership or team leadership, particularly in managing analysts or engineers.

• Preferred: Master’s degree in a relevant field.

• Preferred: CyberArk Defender or Sentry, CISSP, BeyondTrust, or Delinea certification, or formal training in privileged access management, identity security, or Zero Trust architecture.

🏝️ Benefits

• Flexibility for remote work.

• No travel required (Travel Percentage: None).