Identity Governance & Administration Lead

We are seeking a strategic and execution-focused Identity Governance & Administration (IGA) Lead to drive and mature enterprise identity governance capabilities across workforce and customer identity environments. This role owns the strategy, operating model, governance framework, and roadmap for delivering secure, scalable, and auditable access management across the organization.

This position will balance security, compliance, automation, and user experience while driving modernization across identity lifecycle management, entitlement governance, and authentication controls.

PRIMARY DUTIES AND RESPONSIBILITIES:

Identity Governance Strategy & Leadership

• Define and lead enterprise IGA strategy, roadmap, operating model, and maturity plan
• Establish governance frameworks across workforce, privileged, third-party, machine, AI, and customer identities
• Act as primary owner for access governance risk, control effectiveness, and audit readiness

Workforce & Customer Identity Governance

• Oversee lifecycle processes including joiner, mover, leaver, contractor, and partner access
• Govern access across enterprise apps, cloud, SaaS, privileged systems, and critical platforms
• Lead RBAC/ABAC initiatives including role mining, engineering, and lifecycle management and toxic combination identification
• Define customer identity governance standards including registration, identity proofing, consent, delegated administration, entitlement management, and lifecycle controls (activation, inactivity, deletion, retention)
• Ensure alignment with privacy, regulatory, and user experience requirements
• Advance adoption of passwordless and phishing-resistant authentication
• Collaborate with the Detection team to mature identity threat detection capabilities through behavioral analytics

Leadership & Stakeholder Management

• Build and lead a high-performing identity governance function
• Provide executive reporting on access risk, governance maturity, and remediation progress
• Partner across Security, IT, HR, Legal, Privacy, Product, Engineering, and business teams
• Define KPIs/KRIs including provisioning SLAs, certification quality, remediation aging, SoD violations, and risk trends
• Ensure audit-ready reporting, repeatable evidence, and control assurance