Roles and Key Responsibilities

• Drive strategic roadmap and execution of the enterprise PAM program.
• Establish and maintain firm-wide privileged access standards, controls, and operating procedures.
• Lead cross-functional initiatives spanning IAM, Infrastructure, Cloud, Application Engineering, and Technology Risk teams.
• Develop and execute multi-year PAM capability uplift programs.
• Define and oversee governance processes for privileged accounts, privileged roles, break-glass access, and privileged activities.
• Ensure alignment with internal security standards, regulatory requirements, and industry frameworks such as NIST.
• Partner with Technology Risk, Compliance, Internal Audit, and regulators to address PAM-related findings and remediation activities.
• Build and maintain Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for executive reporting
• Partner with engineering teams to implement PAM controls within enterprise platforms and applications.
• Drive automation for onboarding, provisioning, certification, monitoring, and de-provisioning privileged access.
• Support cloud and hybrid environments, ensuring secure management of privileged identities across modern infrastructure.
• Influence architectural decisions that improve security while maintaining operational efficiency.
• Develop executive dashboards measuring PAM coverage, privileged account inventory, JIT adoption, MFA coverage, review completion rates, and control effectiveness.
• Provide regular updates to senior management committees and leadership.
• Translate technical risk into business-focused insights and recommendations.

Required Qualifications

• Bachelor’s degree in computer science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience.
• 7+ years of experience in Cybersecurity, IAM, PAM, Information Security, Technology Risk, or Security Engineering.
• Strong understanding of Privileged Access Management (PAM), Identity and Access Management (IAM), Zero Trust security principles, role-based access controls and privileged role governance, secrets management and vault technologies, modern authentication and MFA, security monitoring and detection engineering, and cloud security across AWS, Azure, and GCP environments.
• Strong stakeholder management and executive communication skills.
• Experience driving cross-functional initiatives involving engineering, risk, compliance, and audit teams.

Preferred Qualifications

• Familiarity with security and regulatory frameworks such as NIST CSF, NIST 800-53, ISO 27001, FFIEC, SOX, or similar standards, with experience supporting regulatory exams or audit engagements.
• Experience with CyberArk, BeyondTrust, HashiCorp Vault, AWS IAM, Entra ID PIM, or equivalent PAM technologies is an advantage.
• Relevant security certifications, such as CISSP, CISM, CRISC, CCSP, or PAM/IAM-related credentials, are highly desirable.

Why Join Us

This is an opportunity to build and scale one of the firm's most strategic cybersecurity programs. You will work with senior leaders, security architects, engineers, and risk professionals to shape the future of privileged