AVP Cybersecurity Identity Governance & Administration (IGA)

TJX•Marlborough, MA

3d•Onsite

About The Position

TJX Companies is seeking an experienced strategic leader to run its Identity Governance & Administration (IGA) function. The role is part of the Global IT and IT Security Leadership Teams and reports to a role identified in the posting as “xxxx.” Cybersecurity is a global, centrally managed organization within Global IT, supporting home offices, stores, and distribution centers across the U.S., Canada, Europe, Australia, and India. The AVP provides strategic oversight and leadership for the enterprise IGA program, covering identity lifecycle management, access management, single sign-on, access requests and approvals, provisioning and deprovisioning, access certifications, entitlement and role management, segregation of duties, identity data quality, and application onboarding. The AVP leads a global team across architecture, engineering, operations, analysis, and application onboarding; establishes the strategy and roadmap; strengthens identity controls; simplifies access processes; improves audit readiness; and partners with business and technology leaders to ensure access remains appropriate throughout the identity lifecycle. The position sets the enterprise IGA and Access Management strategy, target state, multiyear roadmap, operating model, and investment priorities. It leads identity lifecycle and access governance, entitlement and role standards, and the intake and onboarding of applications. It also oversees products and operations, risk and compliance, and modernization through automation, analytics, self-service, standardized integrations, and process simplification.

Requirements

At least 10 years of experience in identity and access management, cybersecurity, information technology, or a related field.
At least 5 years of senior leadership experience.
Experience leading a global IGA function or large-scale identity transformation in a complex, multinational corporate environment with geographically dispersed teams.
Experience leading enterprise platform strategy, architecture, implementation, integration, operations, upgrades, and continuous improvement.
Demonstrated ability to lead major platform implementations and broad application onboarding programs involving business owners, application teams, control partners, vendors, and managed service providers.
Strong understanding of least privilege, Zero Trust, role-based and attribute-based access, birthright access, orphan-account management, policy enforcement, identity analytics, and access risk.
Experience with cybersecurity controls, audit, regulatory compliance, risk management, incident and change management, disaster recovery, and IT service management practices.
Bachelor’s degree in information systems, computer science, cybersecurity, or a related field, or equivalent experience.
Executive presence and excellent presentation, verbal, and written communication skills, including the ability to translate complex identity and control topics into clear business decisions.
Ability to build strong relationships with teammates, leadership, senior management, application and business owners, auditors, control partners, vendors, and other internal and external stakeholders.

Responsibilities

Define and execute the enterprise IGA and Access Management strategy, including the target state, multiyear roadmap, operating model, and investment priorities.
Lead joiner, mover, and leaver processes, access requests and approvals, provisioning and deprovisioning, access certifications, and remediation of inappropriate access.
Establish standards for entitlement ownership, cataloging, risk classification, role design, birthright access, segregation of duties, access packages, exceptions, and retirement.
Lead application intake, prioritization, integration, testing, and production readiness for applications onboarded to IGA services.
Manage technology and services through roadmaps, delivery priorities, service levels, metrics, platform resilience, incident management, and change management.
Ensure IAM services meet regulatory, risk, and security requirements and drive timely remediation of control gaps and findings.
Use workflow automation, analytics, self-service, standardized integrations, and process simplification to improve control consistency and reduce access and onboarding cycle times.
Lead a global team across architecture, engineering, operations, analysis, and application onboarding.
Partner with business and technology leaders to keep access appropriate throughout the identity lifecycle and improve audit readiness.