VP, Identity & Access Management

Lifecycle Management & Automation

• Oversee the design and automation of Joiner-Mover-Leaver processes.
• Drive implementation of access request workflows and access reviews through tools like ServiceNow, with tight policy enforcement and auditability.
• Reduce identity sprawl by enforcing role-based and attribute-based access controls (RBAC/ABAC).
• Support federated SSO and MFA rollout across all SaaS applications to eliminate shadow IT.

Privileged Access & Governance

• Lead the rationalization and control of privileged access across AWS, Azure (PIM), and legacy AD environments.
• Partner with Security Engineering and Audit to execute regular access reviews and design SoD frameworks.
• Define access certification cycles with actionable outputs for business owners.

Cloud & SaaS Identity

• Guide cloud identity strategies for Azure, AWS, and SaaS ecosystems to ensure secure and scalable access models.
• Collaborate with Engineering to securely onboard new SaaS vendors under centralized identity management and SSO.

Audit & Compliance

• Maintain IAM controls to meet FFIEC, SOC 2, and PCI DSS standards, and respond effectively to FDIC audits.
• Establish clear KPIs and metrics for IAM hygiene, access review coverage, and lifecycle automation.

Qualifications

• 10+ years in IAM, Information Security, or IT Risk roles, with 3+ years in a people management or technical leadership capacity.
• Hands-on experience with IAM platforms (e.g., SailPoint, Saviynt, Azure AD, CyberArk, Okta), ideally in a financial services or regulated environment.
• Deep knowledge of identity lifecycle automation, JML workflows, RBAC, ABAC, SSO, MFA, and PAM principles.
• Proven success aligning IAM strategy with risk, audit, and compliance functions.
• Familiarity with scripting or automation (PowerShell, Python) and modern identity protocols (SAML, OAuth2, OIDC, SCIM).
• Strong communication, influencing, and documentation skills; able to evangelize IAM to both technical and business audiences.
• Experience implementing or integrating with HRIS systems like Workday and ITSM systems like ServiceNow is a plus.
• Certifications preferred: CISSP, CISM, or vendor-specific IAM certs.

#LI-AC1 #LI-Hybrid #LI-Onsite

Salary Range: $180,000.00 - $230,000.00

Cross River is an Equal Opportunity Employer. Cross River does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.

By submitting your application, you give Cross River permission to email, call, or text you using the contact details provided. We will only contact you with job related information.