Application Security and Identity Manager

Crown Equipment Corporation•New Bremen, OH

About The Position

Crown Equipment Corporation is a leading innovator in world-class forklift and material handling equipment and technology. As one of the world’s largest lift truck manufacturers, we are committed to providing the customer with the safest, most efficient and ergonomic lift truck possible to lower their total cost of ownership.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline, along with at least 5 years related experience
Non-degree candidates may be considered with 12 or more years of related experience and a high school diploma or GED.
Occasional travel and overnight stays, approximately 0-5%

Nice To Haves

Experience managing identity governance and administration platforms such as SailPoint or Saviynt.
Experience with Microsoft Entra ID, Active Directory, multifactor authentication, single sign-on, privileged access management, and access governance solutions.
Strong knowledge of secure software development lifecycle practices.
Experience with application security testing tools, vulnerability management, and remediation programs.
Relevant certifications such as CISSP, CISM, CRISC, identity management, or cloud security certifications are preferred.
Excellent leadership, communication, problem-solving, analytical, and stakeholder management skills.
Knowledge of the company's culture and values and the ability to facilitate positive relationships between business groups.

Responsibilities

Lead application security and identity professionals responsible for access governance, authentication services, application security assessments, and identity administration.
Develop and execute strategic roadmaps for identity governance, privileged access management, application security, and authentication modernization.
Partner with business units, IT leaders, developers, and system owners to align security requirements with business needs.
Establish standards, procedures, and operational metrics to improve security effectiveness and operational efficiency.
Oversee user lifecycle processes, including provisioning, modifications, transfers, and terminations across enterprise systems.
Ensure periodic access certifications, segregation of duties reviews, and access governance controls are executed effectively.
Lead implementation and operation of privileged account controls, credential vaulting, and least-privilege initiatives.
Manage multifactor authentication, single sign-on, federation, and directory service capabilities to improve security and user experience.
Partner with development teams to integrate security requirements into the software development lifecycle.
Oversee security assessments, including static and dynamic application security testing, code reviews, penetration testing, and vulnerability remediation.
Identify and prioritize application and identity-related risks and drive remediation efforts with application owners.
Evaluate new applications and technology solutions to ensure alignment with Crown cybersecurity standards.
Define and execute long-term identity and application security strategies aligned with organizational risk management objectives.
Develop dashboards and executive reports on access governance, privileged access, application vulnerabilities, remediation efforts, and program maturity.
Present cybersecurity risks, program progress, and investment priorities to leadership and audit stakeholders.