Director, Identity and Access Management

Cencora•Conshohocken, PA

About The Position

Directs the strategy, governance, and operational execution of the enterprise Identity and Access Management (IAM) program to ensure secure, reliable, and compliant access to critical business systems, applications, and data. Leads the evolution of identity services, access governance, privileged access management, and authentication technologies to support organizational growth, regulatory requirements, and cybersecurity objectives. Partners with executive leadership, business stakeholders, infrastructure teams, application owners, and security functions to align identity capabilities with business priorities while enabling a secure and frictionless user experience. Drives the adoption of modern identity principles, including Zero Trust, automation, and cloud-based identity services, to strengthen the organization's security posture and operational efficiency.

Requirements

Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Business Information Systems, or a related field, or equivalent professional experience.
8+ years of leadership experience managing IAM or Infrastructure teams, programs, or security operations.
Demonstrated experience implementing and managing enterprise IAM solutions
Experience supporting hybrid and cloud environments, including Microsoft Entra ID, Active Directory, Okta, SailPoint, CyberArk, Ping Identity, or similar technologies.
Strong understanding of Zero Trust security principles, authentication protocols, access governance, identity lifecycle management, and regulatory compliance frameworks.

Nice To Haves

CISSP, CISM, CRISC, Security+, Certified Identity and Access Manager (CIAM), or equivalent industry certifications.
Experience leading IAM or Infrastructure transformation programs and cloud identity modernization initiatives.
Knowledge of healthcare, pharmaceutical, distribution, or highly regulated industry environments.
Experience overseeing IAM-related audits, compliance assessments, and risk management programs.

Responsibilities

Leads the strategic direction, administration, and continuous improvement of the enterprise Identity and Access Management program, ensuring alignment with organizational business and security objectives.
Develops and maintains IAM roadmaps that support digital transformation initiatives, cloud adoption, business expansion, and evolving cybersecurity requirements.
Oversees identity governance, access certification, role-based access control (RBAC), privileged access management (PAM), authentication services, and lifecycle management processes.
Establishes policies, standards, and procedures for user provisioning, deprovisioning, access reviews, segregation of duties, and privileged account management.
Partners with business leaders, technology teams, and application owners to ensure identity controls are effectively integrated into enterprise systems and business processes.
Provides leadership for enterprise authentication services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), privileged access controls, and federation technologies.
Ensures IAM programs meet applicable regulatory, compliance, audit, and risk management requirements, including support for internal and external audits.
Oversees IAM operational performance through the development of metrics, key performance indicators (KPIs), service-level objectives, and continuous improvement initiatives.
Directs the investigation and resolution of significant identity-related incidents, access control issues, and authentication disruptions, coordinating with cybersecurity, infrastructure, and business teams as needed.
Evaluates emerging identity technologies, industry best practices, and evolving threat landscapes to recommend strategic improvements and modernization initiatives.
Collaborates with enterprise architecture, information security, infrastructure, and application development teams to implement scalable and sustainable identity solutions.
Manages vendor relationships, contract renewals, technology evaluations, and IAM-related budget planning activities.
Leads, mentors, and develops IAM managers, engineers, analysts, and administrators, fostering a culture of accountability, innovation, operational excellence, and continuous learning.
Communicates IAM strategy, risks, program status, and investment priorities to executive leadership and governance committees.