Asst Dir, Identity

GENERAL PURPOSE: The Identity and Access Management Assistant Director, in conjunction with the Chief Technology Officer and organizational business units, is responsible for the planning, building, delivery and support of the Identity and Access Management (IAM) program. This role provides direction and guidance to the development, specifications, and communications of the IAM application and architecture, provides in-depth technical consultation to the business units and provides technical leadership on Identity & Access management, directory services, Privileged Access Management (PAM), Multi-Factor Authentication (MFA), Azure Active Directory (Entra ID), Federated Identities and emerging technologies in the identity space. The ideal candidate is technical and possesses experience in information technology, ITIL change managements and problem management best practices as well as security administration across large heterogeneous networks, including third-party entities. Additionally, as a senior member of the team, leadership skills to coach and mentor less experienced employees is required. The Identity and Access Management Assistant Director is expected to manage a team and execute the IAM strategy as directed by senior management. Consequently, the Identity and Access Management Assistant Director must identify and effectively communicate an actionable workload for team members that adheres to business initiatives ¿ balancing business risk and IAM security best practices. The IAM manager is a subject matter expert for colleagues and is expected to deliver on line-of-business expectations. RESPONSIBILITIES: Provides operational leadership and direction for a team of security professionals Conducts weekly 1:1s with direct reports and periodic 1:1 meetings with all staff Directs, recruits and evaluates team staff. Conducts performance reviews. Conducts performance management conversations as needed Ensures employee engagement and motivates team members to achieve organizational excellence Contributes to a world-class information technology organization, assisting in continuous process improvement initiatives and refinement of service offerings Collaborates with multiple IT Departments Follows established procedures and attends routine meetings in both Univ IT and ISD including change control meetings, project meetings, leadership meetings, workgroup meetings, architecture meetings and the Technology Advisory Council Identity and Access Management Planning Facilitates the use of technology-based tools or methodologies to review, design and/or implement products and services to provide a strong IAM program that balances access with compliance and confidentiality Identifies and evaluates complex business and technology risks, internal controls that mitigate risks, and related opportunities for internal control improvement Identifies the broader impact of current decisions related to user access, data access and information security Works in tandem with leadership for annual strategic technology and budgetary directives. Maintains up-to-date knowledge related to identity and access management; Active Directory design and configuration, Information security best practices, Multi-factor authentication technologies, LDAP protocol and identity federation, Active Directory, Microsoft client operating systems and circulates this knowledge through the business units. Business Strategy Envisions business outcomes and facilitates alignment with them Aligns IAM processes across the organization, and develops and documents standards for organizational use Co-leads an IAM selection process, evaluates existing and emerging technologies and tools in the selection of an IAM service offering for the business units Understands business and information technology management processes and demonstrates advanced understanding of business processes, internal control risk management, IT controls and related standards Other duties as assigned. QUALIFICATIONS: Bachelor¿s degree in related discipline required; Master¿s degree preferred. 4 years of progressive experience at a supervisory level in a technology environment required; or an equivalent combination of education and experience required. 10 years of related experience preferred; 4 years of supervisory experience preferred. Expertise in IDM technology design, implementation, and delivery required Expertise in IDM solutions both on-premises and in the cloud required Ability to learn new technologies quickly required Strong understanding of various regulations and laws such as Health Information Portability and Accountability Act (HIPAA), Family Educational Rights and Privacy Act (FERPA), and General Data Protection Regulation (GDPR) preferred Excellent verbal and written communications skills; excellent presentation skills required Ability to handle multiple tasks simultaneously and meet required deadlines required Ability to contribute both individually and provide technical leadership as part of a team required Ability to interact with all levels of staff, as appropriate, to communicate and to process communications from others on technical change required Ability to present technology in non-technical terms and recognize the extent to which a given audience requires this required. CITM, AMA, CRISC, CISM, CISA, GSEC preferred The University of Rochester is committed to fostering, cultivating, and preserving a culture of equity, diversity, and inclusion to advance the University¿s mission to Learn, Discover, Heal, Create ¿ and Make the World Ever Better. In support of our values and those of our society, the University is committed to not discriminating on the basis of age, color, disability, ethnicity, gender identity or expression, genetic information, marital status, military/veteran status, national origin, race, religion/creed, sex, sexual orientation, citizenship status, or any other status protected by law. This commitment extends to the administration of our policies, admissions, employment, access, and recruitment of candidates from underrepresented populations, veterans, and persons with disabilities consistent with these values and government contractor Affirmative Action obligations. How To Apply All applicants must apply online. EOE Minorities/Females/Protected Veterans/Disabled Apply for Job Careers Sign In New User Location: Central Administration Full/Part Time: Full-Time Opening: Schedule: