Security Program Manager

This is a fully remote position, open to applicants in North Carolina.

📋 Description

• Elicit, analyze, and document both functional and non-functional requirements for IAM platforms and services from initiation through to delivery and sign-off.

• Facilitate requirements discovery sessions, stakeholder reviews, and walkthroughs.

• Conduct research and document security, compliance, and regulatory requirements.

• Create detailed user stories, use cases, and process flows, incorporating success paths, exception handling, and failure scenarios.

• Oversee requirements throughout their lifecycle, focusing on traceability, prioritization, change control, and approval.

• Collaborate with engineering, QA, and operations teams throughout the SDLC to assist with design, building, testing, and release activities.

• Aid in application onboarding and integration efforts for IAM services such as authentication, authorization, and provisioning.

• Maintain documentation in Confluence and Jira, ensuring that requirements and decisions are accurately recorded and ready for audit.

• Serve as a trusted IAM advisor to business and technical stakeholders across the organization.

⛳️ Requirements

• Strong analytical, problem-solving, and critical thinking abilities.

• Capability to effectively communicate security and technical concepts to varied audiences.

• Proven track record in researching, authoring, and managing complex requirements from start to finish.

• Proficiency in creating comprehensive documentation, diagrams, and process flows.

• Exceptional written and verbal communication skills with a service-oriented approach.

• Working knowledge of IAM concepts, such as SSO, MFA, identity federation, user provisioning and lifecycle management, application onboarding, PAM, and coarse-grained authorization models.

• Ability to research and implement information and data security requirements aligned with OWASP, SOX, NIST, GDPR, and GxP.

• Experience with the SDLC, including requirements, design, testing, and release phases.

• Familiarity with cloud environments and cloud security concepts.

• Proficient in Excel, PowerPoint, Confluence, and Jira.

• Experience with TestRail is strongly preferred.

• Experience with IAM platforms such as Azure Active Directory (Entra ID), Azure AD B2C, WSO2 Identity Server, and SailPoint IdentityIQ is highly desirable.

• Strong organizational and prioritization competencies.

• Attention to detail with a focus on overall outcomes and delivery.

• Comfortable working in a global, matrixed organization and engaging with senior stakeholders.

• Ability to professionally represent IAM services, processes, and capabilities across the enterprise.

🏝️ Benefits

• Incentive plans, bonuses, and/or other forms of compensation may be offered.

• Health and welfare benefits may be provided.