Identity and Access Management (IAM) Manager

Regions Bank•Hoover, AL

5d•Onsite

About The Position

At Regions, the Identity and Access Management (IAM) Manager leads a diverse team of engineers, analysts, and administrators in implementing IAM best practices across the enterprise and ensures operating systems are secure. This position strives to increase efficiency and improve IAM capabilities for the organization. Additionally, this position continuously improves, designs, develops, implements, and monitors appropriate metrics to maintain quality and efficiency.

Requirements

Bachelor's degree in a related field and six (6) years of related experience
Two (2) years of lead or supervisory/managerial experience
Basic understanding of UNIX security, as it relates to user access and provisioning
Experience managing Information Technology and/or Information Security projects
Experience with Agile methodology
Experience with PowerBI/Tableau for reporting projects
Good understanding of network and infrastructure (Networking protocol knowledge is an advantage- TCP/IP, HTTP, HTTPS, DNS, firewalls, proxies, IDS, IPS etc
Ability to be broadly focused and manage multiple efforts concurrently
Ability to work effectively to build relationships with colleagues, application owners, and executive management through positive interaction
Ability to multi-task, to be self-initiated, and work independently
Demonstrate planning and project management skills
Excellent customer service and interpersonal skills
Proactive, decisive, action-oriented individual
Proven ability to set technology strategy
Strong attention to detail and outstanding analytical skills
Strong organizational skills
Strong written and verbal communication skills
Understanding of and ability to interpret applicable rules, regulations, and industry guidance
Hands-on experience leading and scaling enterprise secrets management platforms, including HashiCorp Vault and/or CyberArk, with responsibility for platform availability, resiliency, performance optimization, and operational excellence.
Demonstrated expertise in DevSecOps, automation, and infrastructure-as-code practices, including the implementation of automated secrets lifecycle management, and CI/CD integration
Experience driving enterprise-wide adoption of privileged access and secrets management capabilities across multi-cloud and hybrid environments, establishing standards for credential rotation, machine identity management, secure application onboarding, and secrets governance.
Proven leadership in building and developing high-performing engineering teams with expertise in cloud security, platform engineering, and identity technologies, while partnering effectively with application, infrastructure, and cybersecurity stakeholders to deliver strategic IAM outcomes.

Nice To Haves

Recognized security industry certifications preferred (CISSP, CAP, etc.)
Significant knowledge of Active Directory security, as it relates to user access and provisioning

Responsibilities

Manages a group of analysts, engineers, or administrators to help support the IAM, Mainframe or Operation Systems teams within the Information Security function
Develops and maintains Information Security standards related to Identity & Access Management
Ensures all processes are documented appropriately
Works closely with Risk/Audit partners to meet all compliance objectives as they relate to access management
Develops Key Risk Indicators (KRI's) and Key Performance Indicators (KPI's) to ensure operational effectiveness
Identifies opportunities for improvement in the IAM processes and systems
Plans, estimates, staffs, organizes and monitors significant project activities
Provides clear and effective communication with all levels of the organization
Fosters an inclusive, collaborative environment within the team, with Enterprise Architects, Infrastructure, Support and with other IT teams
Identifies problematic areas and implements strategic solutions
Serves as primary escalation point for IAM-related issues and provides solutions
Manages the teams through recruiting, training, coaching, communicating job expectations and appraising associate performance
Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored to strengthen risk management, compliance, and cyber security, effectively mitigating risk to levels within the company’s risk appetite
Ensures disciplined change management by evaluating risk and control impacts when designing or implementing changes to processes, systems, products, and/or services
Oversee administration and optimization of enterprise secrets platforms (HashiCorp Vault and CyberArk), ensuring high availability, scalability, and resilience
Drive automation of secrets and vault operations (onboarding, provisioning, lifecycle management) through CI/CD pipelines, infrastructure-as-code, and DevSecOps best practices
Lead the expansion and maturation of enterprise secrets capabilities, promoting adoption of automated password and secrets management to eliminate manual processes and static credentials
Partner with application, platform, and security teams to onboard services and scale secure secrets workflows across multi-cloud and on-prem environments, establishing standards for access, rotation, and usage
Build and lead a high-performing team with strong cloud, DevSecOps, and platform engineering expertise, providing technical leadership aligned to IAM strategy and modern security practices