IAM Access Control Senior Group Manager

2 days ago

Charlotte NC United States Truist Bank Full time

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary: Regular

Language Fluency: English (Required)

Work Shift: 1st shift (United States of America)

Please review the following job description:

This role is responsible for developing, implementing, and maintaining a Role Based Access Control (RBAC) strategy to be executed across the Bank’s applications and IT systems. The primary responsibility will be to build and apply a security model that combines a working understanding of business operations for applications, IT systems, and job functions to define birthright roles. The incumbent will need to be versed in industry best practices such as NIST and FFIEC to ensure proper risk controls are implemented across these roles. Responsibilities will include a subset of IAM life-cycle functions such as:

  1. Defining core, hierarchical and constrained access controls
  2. Role assignments and permission authorizations
  3. Role governance
  4. Role compliance
  5. Separation of duties enforcement

ESSENTIAL DUTIES AND RESPONSIBILITIES

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

  1. Create and maintain an access management strategy, roadmap and control framework that includes appropriate control models (e.g., RBAC, PBAC, ABAC) and is in alignment with NIST and FFIEC.
  2. Work with Application Technical Managers (ATM) to understand roles and entitlements within the application landscape to define role-based permissions.
  3. Design access models (i.e., how access is structured), access roles and RBAC based on business needs and the access management strategy, roadmap, and control framework.
  4. Manage a team of 5 to 10 direct report teammates and contract workers who execute strategic and complex work designing role-based access controls.
  5. Design, implement, and govern security controls for access to applications and IT systems.
  6. Partner with role owners and appropriate subject matter experts to design effective segregation of duties (SoD) policies.
  7. Ensure appropriate SoD and least privileged access controls are effective across all IT assets.
  8. Proactively engage with HR, D-CIO organizations, and stakeholders to understand their access needs.
  9. Provide consulting to standup new access based on requests from lines of business (partners with other teams to implement).
  10. Oversee managed services for:
  • Access analysis and reporting
  • Role mining and role “fit” analysis
  • Execution of RBAC and access role life cycle (e.g., creation, configuration, and deletion in IGA)
  • Configuration of SoD policies and rules in Truist's IAM system
  • Resolution of SoD conflicts
  • Maintain role titles, descriptions, and other attributes
  • Administration of access management delegates
  • Behavioral analytics based on activity and authorization logs from Truist's SIEM
  • KPIs to measure performance against the service level agreement (SLA) for execution of the role lifecycle processes
Create and maintain process documentation for the role lifecycle processes. Design and implement role assignments, role authorization and permission authorizations across applications following the principle of least privilege. Develop and implement static and dynamic separation of duty rules and policies. Establish a governance structure to maintain role policies and role re-evaluation guidelines. Perform hiring, coaching, terminations, disciplinary action, and performance reviews to enable a high-performing team. Oversee strategic and operational plans in support of business objectives; develop cross-departmental business cases to solve problems by making technical and financial tradeoffs. Improve the user experience for requesting and obtaining access necessary for staff to perform their job functions. Proactively engage with stakeholders to make them aware and willing to adopt our solutions, which includes managing up, out, and down to avoid surprises and position our solutions to be successful.

QUALIFICATIONS

Required Qualifications:

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

  1. Bachelor’s degree and eight years of experience in systems engineering or administration or an equivalent combination of education and work experience.
  2. Deep specialized and/or broad functional knowledge in applied enterprise information security technologies including but not limited to firewalls, intrusion detection/prevention systems, network operating systems, identity management, database activity monitoring, encryption, content filtering, and Mainframe security.
  3. Previous experience in leading complex IT projects.

Preferred Qualifications:

  1. Significant knowledge and demonstrated experience in the following:
  • Leading a team of senior and less experienced cybersecurity professionals.
  • Developing and implementing an access management strategy.
  • Leading implementation and transition to RBAC, ABAC and PBAC access control models.
  • Advanced role-mining and role engineering techniques.
  • Implementation of effective segregation of duties (SOD) controls.
  • Designing and executing security controls.
Deep expertise of Human Capital job profiles, titles, and roles to create and align birthright rules. Bachelor’s degree or equivalent. 10 years’ technical experience working in the identity and access management control function. 10 years’ experience as a manager leading diverse teams, such as teammates, contract workers, onshore, offshore resources, and/or managed services. 10 years managing simple and complex role permissions; experience managing third party managed service provider contracts. 5 years’ experience and expert-level technical knowledge of product knowledge and processes for specific IAM areas (e.g., Active Directory, RACF, Azure, AWS, Idaptive, Centrify, CyberArk, SailPoint, Oracle OIM, Persistent Ignite). 5 years’ technical experience working for a top 10 US bank. 10 years’ experience managing the remediation of regulatory matters and internal findings. 10 years’ experience in strategic planning and applying industry best practices to operations (NIST, FFIEC). Excellent communication, collaboration, and organizational skills. Demonstrated leadership abilities, high accountability, drive, and initiative.

OTHER JOB REQUIREMENTS / WORKING CONDITIONS

Sitting: Constantly (More than 50% of the time)
Visual / Audio / Speaking: Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.
Manual Dexterity / Keyboarding: Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers.
Availability: Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need.
Travel: Minimal and up to 10%

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist supports a diverse workforce and is an Equal Opportunity Employer that does not discriminate against individuals on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law Pay Transparency Nondiscrimination Provision E-Verify

#J-18808-Ljbffr

  • Identity and Access Management

    4 weeks ago

    Alpharetta, GA, United States LexisNexis Risk Solutions Full time

    We are seeking a highly motivated Identity and Access Management (IAM) Engineer to join a team responsible for the design and implementation of IAM/ PAM controls across LexisNexis Risk Solutions. Working within a focused squad, you will take guidance and requirements from the IAM Operations and Security Architecture functions, formulate projects &...

  • Identity and Access Management

    2 days ago

    Washington, DC, United States Bank of America Full time

    Identity and Access Management (IAM) - Senior Product Portfolio Lead (Manager) Denver, Colorado; Washington, District of Columbia; Chicago, Illinois Job Description: At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver...

  • IAM - Identity Access Controls Managment (Sailpoint)

    4 weeks ago

    Tulsa, OK, United States CDW Full time

    Title: Identity Access & Control Management (Sailpoint)Location: fully onsite in Tulsa, OKMust be have EAD, Green Card or US CitizenshipMajor Functions:Role-Permissions Analysis - 40% of total jobUnderstand/Analyze/Document the goals and scenarios for roles (requirements)Understand business functions and entitlement requirements for rolesUnderstand how...

  • Identity & Access Management (IAM) Developer

    3 days ago

    Los Angeles, CA, United States The Regents of the University of California on behalf of their Los Angeles Campus Full time

    Department Summary The UCLA Information Security Office enables UCLA’s goals by providing leadership assuring the confidentiality, integrity, and availability of its information resources. The Information Security Office enables efficient incident response planning and notification procedures. In addition, the office aims to implement risk assessment...

  • Identity & Access Management (IAM) CO

    2 weeks ago

    Denver, CO, United States Creative Financial Staffing Full time

    Identity & Access Management (IAM) Manager Position Summary This Information Technology Manager position within the Cybersecurity and Infrastructure department will drive future vision, strategy realization, technology roadmaps, and innovation initiatives across the Identity & Access Management (IAM) landscape. This role has a focus on the delivery of...

  • Senior Identity

    1 month ago

    Charlotte, United States Vanguard Full time

    As the Senior Identity & Access Management Risk Advisor, you will play a pivotal role on a new team in Technology Risk focused on enhancing line 2 oversight of Vanguard’s Enterprise Security & Fraud services. In this role you will act as an independent challenger and advisor to the IAM organization and will influence critical initiatives, execute risk...

  • Cybersecurity Access Control Expert

    1 week ago

    Charlotte, North Carolina, United States Truist Inc Full time

    About the Job">This role is an excellent opportunity to work with a top 10 US bank, leveraging your expertise in access control and cybersecurity to drive business growth and ensure regulatory compliance.">As a Cybersecurity Access Control Expert at Truist Inc., you will be responsible for designing and implementing access models that meet the least...

  • Identity & Access Management (IAM) Engineer

    3 days ago

    Los Angeles, CA, United States University of California - Los Angeles (UCLA) Full time

    Identity & Access Management (IAM) Engineer The Identity & Access Management (IAM) Engineer will be responsible for the development, implementation, configuration, integration, and maintenance of IAM solutions that align with the university's security policies and requirements. This role involves ensuring secure, compliant, and efficient management of...

  • ? Identity Access

    1 month ago

    Tulsa, OK, United States CDW Full time

    *Before you get too deep into this posting, it's worth noting company policy: Facial hair is not permitted for full-time employees (mustaches are allowed).About the Role: We’re seeking an Identity Access & Control Manager/Admin to join a dynamic team in Tulsa, OK. This is a 6-month contract-to-hire role, offering the chance to make a real impact in...

  • IAM Intern

    4 weeks ago

    Princeton, NJ, United States Labcorp Full time

    At LabCorp, we provide real-world experience by working on assignments in a team atmosphere which furthers an education in STEM and Healthcare disciplines. Our interns have the opportunity to showcase their work by demonstrating their achievements to their supervisors, their mentors, and our senior management team. Each intern will participate in group...

  • Senior Project Manager

    4 weeks ago

    Gilbert, AZ, United States iMatch Technical Services Full time

    POSITION SUMMARY: The Senior IT Project Manager works within the IT-PMO department, managing cross functional projects with complex interdependencies to other systems and projects. Projects are both strategic and tactical in scope and objectives have a high degree of difficulty to understand and define. This project is specifically for the Cyber Security...

  • IAM Architect

    3 days ago

    Chicago, IL, United States ALLTECH CONSULTING SVC INC Full time

    410 Wall St. Princeton, NJ 08540 Create a free Alltech Consulting Services account IAM Architect (Identity and Access Management) Responsibilities: The candidate should be able to design and provide solutions for Identity and Access Management systems. Preferably, the candidate should have worked with IAM tools, with at least end-to-end implementation...

  • Senior Identity and Access Management Developer

    1 week ago

    Charlotte, North Carolina, United States Syntricate Technologies Full time

    At Syntricate Technologies, we are seeking an experienced Senior Identity and Access Management (IAM) Developer to join our team. This is a contract role based in Charlotte, NC.Job Summary:We are looking for a highly skilled IAM developer with expertise in PingFederate policy design, federation concepts, B2C, and SSO protocols. The ideal candidate will have...

  • Senior IAM Ping Service Developer

    1 week ago

    Charlotte, North Carolina, United States Syntricate Technologies Full time

    OverviewSyntricate Technologies is a renowned technology firm dedicated to delivering cutting-edge solutions. As an experienced developer, you will play a vital role in shaping our identity access management (IAM) services.Job SummaryWe are seeking a highly skilled Senior IAM Ping Service Developer to join our team. The successful candidate will have...

  • IAM DevOps Manager

    4 weeks ago

    Marlborough, MA, United States BJ's Wholesale Club Full time

    Job Summary:The IAM (Identity and Access Management) DevOps Manager is responsible for overseeing the development, implementation, and management of identity and access management solutions within the organization. This role combines expertise in IAM systems with DevOps practices to ensure the security, efficiency, and scalability of the company's IAM...

  • IAM Engineer

    4 weeks ago

    Buffalo, NY, United States Solü Technology Partners Full time

    Job Description - Overview:As a Workforce IAM - PAM - Cyber Security Engineer, you will play a crucial role in implementing and supporting Privileged Access Management Solutions in alignment with M&T’s identity and access management strategy. You will work closely with cross-functional teams to ensure the effective management of privileged access rights,...

  • Senior Consultant

    3 days ago

    Washington, DC, United States Stadt Zürich – Entsorgung + Recycling Zürich Full time

    Location: Zurich, Basel, GenevaWork Pattern Percentage: 80-100% Finding the talent that makes Deloitte unique. Drive progress in a dynamic digital world. Join one of the largest and most advanced IAM practices with 1,000+ IAM specialists globally. Some of the most complex and prestigious IAM projects were led and delivered by our team in Switzerland while...

  • IAM Engineer

    1 month ago

    Dallas, TX, United States Apex Systems Full time

    Full Time- Direct Hire position Hybrid - 3 days a week on Site in Dallas Medical District Job Duties:The IAM Support Engineer plays an essential role in Enterprise Systems and Services. The IAM Support Engineer’s responsibility is to ensure people have the right access to the right digital resources at the right time. As an IAM support engineer you will...

  • AWS Devops Engineer

    1 month ago

    Charlotte, United States A-Line Staffing Solutions Full time

    Position: Senior Cloud Platform EngineerLocation: Hybrid, Charlotte, NCRate: 55-65 on w-2 (no C2C or third party candidates will be accepted on this role.)Compensation: Competitive and commensurate with experienceOverview:We are looking for a specialized AWS IAM professional to join our cloud engineering team. This role is ideal for a strategic thinker and...

  • AWS Devops Engineer

    1 month ago

    charlotte, United States A-Line Staffing Solutions Full time

    Position: Senior Cloud Platform EngineerLocation: Hybrid, Charlotte, NCRate: 55-65 on w-2 (no C2C or third party candidates will be accepted on this role.)Compensation: Competitive and commensurate with experienceOverview:We are looking for a specialized AWS IAM professional to join our cloud engineering team. This role is ideal for a strategic thinker and...