Head of Identity and Access Management

Caterpillar Inc.•Nashville, TN

17h•Onsite

About The Position

The Head of Identity and Access Management provides vision, leadership, and strategic direction for the enterprise Identity Access Management services and product offerings. This role is responsible for directing a global, multi-tiered team to support critical business and process requirements while securing the enterprise mission. You will be accountable for the end-to-end management of IAM programs, including global project delivery, "identity hygiene," and data governance initiatives, while navigating a highly matrixed environment with diverse stakeholders. This position directs functions related to complex global Identity Access Management (IAM) security programs. The incumbent develops and manages the capital and expense budget for IAM operations and related enterprise security programs. This position operates in a highly matrixed environment with diverse freedom to act, manages cross-regional initiatives, and exhibits a high degree of influence to gain support around long-term vision. Requires broad company knowledge and develops close relationships with senior management of operating groups globally to help evaluate key risks. Briefs management on the status of security issues affecting operations globally. This position establishes and maintains a well-developed network of IAM industry professional contacts. The incumbent must possess excellent people skills with the ability to interact with and influence senior management to further the Identity Access Management program with an ability to set, manage, and meet expectations with business partners. Exceptional leadership, organizational, and people skills demonstrated persuasive and influencing capabilities and an ability to lead and motivate others. Ability to work quickly and independently with diligence and sensitivity to deadlines. Continually develop the IAM expertise and capacity of the Caterpillar security function for proper succession planning.

Requirements

Progressive experience in Information security including Identity and Access Management
Experience in business analysis, documentation, and user access review
Extensive knowledge of project management best practices, tools, and techniques
Extensive knowledge and experience with privileged identity management, access governance and other IAM solutions such as Active Directory, Azure AD, CyberArk, SailPoint, Ping Federate etc.
Must be able to review application security and make recommendations for improvements.
Strong communications skills (written and verbal) to be able to work with technical and non-technical team members.
Ability to train, manage and assist co-workers and direct reports on all aspects of the program build and evolution.
Bachelor’s degree in computer science or related area
Industry recognized certification in security (e.g., CISSP, CISA, CISM, etc.)
Knowledge of organization's budget process; ability to apply policies and practices for planning and administering a budget.
Knowledge of effective planning techniques and ability to contribute to operational (short term), tactical (1-2 years) and strategic (3-5 years) planning in support of the overall business plan.
Knowledge of techniques, roles, and responsibilities in providing technical or business guidance to clients, both internal and external; ability to apply consulting knowledge appropriately.
Knowledge of processes, tools, and techniques for assessing and controlling an organization's exposure to various risks; ability to apply knowledge of risk management appropriately to diverse situations.
Knowledge of the critical competencies required to achieve intended results; ability to generate consistent approaches for hiring, selecting, retaining, and leveraging talent across the organization.
Knowledge of effective team building techniques; ability to form and manage effective teams.
Knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.
Knowledge of network attacks and the defenses used; ability to defend and prevent electronic threats, theft, and attacks.

Responsibilities

Direct and mentor a global organization of managers, architects, and technical staff; drive succession planning to ensure the long-term capacity and expertise of the security function.
Researches and analyzes new processes and technologies available in the IAM industry facilitating alignment with corporate systems and strategies.
Develop business cases to secure approval for implementation of new systems and technologies.
Exhibit a high degree of influence with senior management and global operating groups to gain support for long-term IAM visions.
Maximizes security programming while minimizing costs while advising on risk mitigation to acceptable level.
Function as a primary Change Agent for IAM programs, creating, maintaining, and tracking integrated initiatives for effective global operations.
Participates in setting IAM security strategies for Caterpillar that impact business outcomes.
Acts as a change agent for IAM programs and responsibilities include creating, developing, maintaining, and tracking integrated initiatives for effective operations.
Direct the development of complex IAM security protective measures and oversee the selection, testing, and secure installation of IAM services and products.
Responsible for governance development, management, and deployment for training, communications, program channel delivery, and assessment for continual process improvement.
Lead initiatives focused on the integrity of identity data, lifecycle management, and the reduction of technical debt within identity systems.
Develops, maintains, and coordinates audit compliance actions for the analytic and technical aspects of Identity Access Management (IAM).
Maintains integrity of IAM programs and systems.
Provides corporate wide focus for efforts relating to compliance with government laws and regulations and with enterprise policies on business ethics and conduct.
Responsible for selection, testing, and secure installation of IAM services and products.
Responsible for identifying and mitigating threats and vulnerabilities associated with compromising IAM security issues.
Maintain current situational awareness of global threats to the enterprise and personnel through critical risk assessment and security threat analysis.
Directs the development of complex IAM security protective measures.
Develops and manages the capital and expense budget for IAM operations and related enterprise security programs.
Manages cross-regional initiatives.
Briefs management on the status of security issues affecting operations globally.
Establishes and maintains a well-developed network of IAM industry professional contacts.
Continually develop the IAM expertise and capacity of the Caterpillar security function for proper succession planning.