Manager, Identity & Access Management

Description

The Manager, Identity Access Management (IAM) is responsible for overseeing the organization's identity and access management risk framework and providing independent Second Line of Defense (2LOD) oversight of identity governance, access controls, privileged access management, and authentication practices. This role ensures IAM risks are appropriately identified, assessed, monitored, and managed in accordance with regulatory expectations, industry standards, and organizational risk appetite.

This position partners closely with Information Technology, Cybersecurity, Internal Audit, Compliance, and business stakeholders to evaluate IAM control effectiveness, assess emerging risks, and strengthen identity governance practices across the organization.

Here’s what you can expect from the job and what you need to be successful:

What You'll Do

• Oversee the IAM risk management program, including governance, risk assessments, control evaluations, and monitoring activities.
• Evaluate the design and effectiveness of identity and access management controls, including user provisioning, deprovisioning, role-based access controls, privileged access management, segregation of duties, and authentication controls.
• Provide independentchallengeand oversight of first-line IAM processes and access governance decisions.
• Conduct risk assessments of IAM processes, technologies, systems, and emerging identity-related threats.
• Monitor IAM-related risk indicators, control performance metrics, exceptions, and remediation activities.
• Oversee periodic access certification and governance processes, ensuring compliance with policies and regulatory requirements.
• Review and challenge privileged access management programs, identity lifecycle management processes, and authentication controls.
• Partner with Information Security, Technology, Compliance, and Internal Audit to evaluate control effectiveness and remediation plans.
• Support regulatory examinations, audits, and independent reviews involving access management and cybersecurity controls.
• Develop and deliver reporting on IAM risk exposure, control effectiveness, and emerging risks to leadership and governance forums.
• Support development and maintenance of IAM risk policies, standards, and governance documentation.
• Identify opportunities to improve IAM governance, risk management practices, and control maturity.

Essential Skills

• Required Education:Bachelor's degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree), advanced degree preferred.
• Required Experience: 5+ years of relevant experience, 0 - 2 years as a People Leader
• Strong understanding of IAM governance and controls.
• Knowledge of access management, privileged access management, authentication, and identity lifecycle management.
• Understanding of cybersecurity frameworks (NIST, FFIEC, ISO, CIS).
• Experience assessing technology and cybersecurity risks.
• Strong analytical and problem-solving skills.
• Ability to influence stakeholders and provide effective challenge.
• Experience supporting audits, examinations, and regulatory reviews.

Preferred Certifications

• CISSP
• CISA
• CRISC
• CISM

Location: Marlborough or Chelmsford, MA | Hillsboro, OR (HYBRID)

Target Compensation: $116,500 - $140,000 + annual bonus

Schedule: Monday through Friday 8a-5p

#FTHP

Who We Are

What makes First Tech different? Click here to learn more!

Every great journey begins with a bold idea—and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.

Employees Are Eligible For

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)

Employment Statements

First Tech is an equal opportunity employer, and we value diversity, inclusion, and equity at our company. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

If you're applying for a job and need a reasonable accommodation for any part of the employment process, please send an email to [email protected] and let us know the nature of your request and contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address.

First Tech is not currently offering Visa transfer/sponsorship for this position.