Director of Identity & Access Management

The Director of Identity & Access Management, Information Security is responsible for the development and implementation of cybersecurity strategies and initiatives that reduce the risk of financial, operational, reputational and regulatory harm to WellSky and its clients. The scope of this work includes leading an information security team, including global internal teammates, and third-party contractors. The Director of Identity & Access Management (IAM) is responsible for overseeing the development, implementation, and management of WellSky's identity and access management strategy.

Key Responsibilities:

• Oversee the day-to-day operations of IAM including user provisioning and deprovisioning, identity federation projects, privileged access management, and user access reviews.

• Communicate and implement an organization-wide identity and access management strategy aligned with business goals, industry standards, and regulatory requirements.

• Develop IAM governance documentation such as policies, procedures, standards, and guidelines, role creation and management, and SOD (Separation of Duties).

• Partner with stakeholders in Information Security, Corp IT, Engineering, Solutions Management, and the business to understand needs, desired business outcomes, provide education and position IAM as a critical business enabler.

• Oversee the design and implementation of a secure IT infrastructure to ensure that security is embedded into all aspects of technology, from architecture and design to development and deployment.

• Perform other job duties as assigned.

Required Qualifications:

• Bachelor's degree in a related field or equivalent work experience

• At least 8-10 years of relevant experience

• At least 4-5 years of relevant management experience

Preferred Qualifications:

• Understanding of IAM principles including access control, authentication, authorization, provisioning, least privilege, privileged access, Segregation of Duty (SOD), and Role Based Access Control (RBAC)

• Demonstrated experience implementing and managing Okta Workforce, Okta CIAM, Active Directory, and privileged access management tools.

Job Expectations:

• Willing to work additional or irregular hours as needed

• Must work in accordance with applicable security policies and procedures to safeguard company and client information

• Must be able to sit and view a computer screen for extended periods of time

#LI-TC1

#LI-Remote