Identity and Access Management Ops Manager

Wyndham Hotels & Resorts•Orlando, FL

11d

About The Position

Travel + Leisure Co. is the world’s leading vacation ownership and travel membership company, with a dynamic and growing portfolio of resort, travel club, and lifestyle travel brands. Our dedicated associates help the company achieve its mission to put the world on vacation. Innovation and growth keep our work interesting and fun. Every day is a chance to learn something new and turn vacation inspiration into exceptional experiences for millions of travelers worldwide. The primary function of the Manager, Identity and Access Management (IAM) Operations is to be responsible for the leading and managing the IAM operations, engineering, and governance teams. This would be primarily related, but not limited to, identity management in the SailPoint LifeCycle Manager, Okta product suite and Cyberark privilege access management. Additionally, this position will participate in managing the end-to-end Identity Management and access customer experience across the Travel + Leisure Co enterprise. This will include managing digital IDs for employees, contractors, and vendors across multiple domains and platforms to maintain compliance with regulatory governance.

Requirements

Bachelor’s degree in IT field or equivalent experience is preferred
People skills: Ability to coordinate, work with and gain the trust of business stakeholders, technical resources, and third-party vendors.
Able to work under pressure in time critical situations.
Process Skills: Strong attention to detail in conducting analysis combined with an ability to accurately record full documentation in support of IAM processes.
Detailed knowledge of current regional and international best practices in the IAM arena.
Communication Skills: Excellent written and verbal communication skills are required. Ability to communicate effectively with business representatives in explaining impacts and strategies and where necessary, in layman's terms.
Fundamental understanding of Microsoft’s Active Directory structure including Organizational Units, User Accounts, Group Memberships, and access rights.
Strong knowledge of Single Sign-On and Authentication and Authorization Services such as SAML 2.0, OpenID, and Kerberos
Demonstrated ability to work under pressure, possess good written and oral communication skills, attention to detail, and be self-motivated
In depth knowledge of share, file, and folder permissions in Microsoft Windows
Strong knowledge in LDAP and Active Directory Services
Ability to analyze business processes to improve security assurance posture of the department.
Ability to work independently to achieve departmental objectives
Understanding of operating system level security and user access audit logging
Some experience with account management within Unix
General knowledge of Microsoft Exchange
Fundamental knowledge of SOX/PCI/PII regulations
This role will have supervisory responsibilities. As such, the individual must have a minimum of 3 years’ experience in the area of team/vendor management.

Nice To Haves

Any certifications around the specific IAM tools utilized by Wyndham (SailPoint, Okta, Cyberak etc.) are a plus.

Responsibilities

Design, develop, document, analyze, test, and/or modify new software systems part of the IAM Toolset; including SailPoint LifeCycle Manager, Okta and Cyberark platforms.
Work with users and developers to analyze requirements of software applications to bring them into request process, IAM, and certification platform.
Assists project teams with the design and implementation of user access roles at the application and technology infrastructure levels as necessary.
Frequently exercise discretion and independent judgment whether system or access level changes meet regulatory and statutory compliance requirements.
Manage the IAM team through general troubleshooting of access related issues.
Contributes to Enterprise Information Security team effectiveness by assisting in the strategic direction of the IAM program.
Assists the Business and HR to determine employee or third party/vendor level of access and status (manually or via automated workflows).
Assist auditors as needed to ensure compliance.
Participates in periodic compliance audits (i.e. access recertification) in conjunction with risk and compliance management capability for PCI, SOX, PII and BCP/DR related systems.
Participates remediation activities in response to access recertification, audit and/or assessment findings pertaining to inappropriate user access.
Perform regular maintenance of application data, documentation, and record keeping data.
Responsible for the daily management, direction, and workload of the Wyndham Identity and Access Management personnel.
Organizes and tracks team projects.
Ensure department SLAs are met and reporting KPI to Management is performed on a regular basis.
Provides operational reporting by practice areas on support investment such as average queue depth, incident and request resolution times, and system capacity.
Manages relationships with external vendors for IAM functions.
Participates in the organization of after-hours maintenance efforts.
Develops and IAM policy and documentation standards across the organization.

Benefits

Medical
Dental
Vision
Flexible spending accounts
Life and accident coverage
Disability
Depending on position, paid time off, parental leave and holidays (speak to your recruiter for additional information)
Wish day paid time to volunteer at an approved organization of your choice
401k with employer match (subject to eligibility requirements, including tenure - speak to your recruiter for additional information)
Legal and identify theft plan
Voluntary income protection benefits
Wellness program (subject to provider availability)
Employee Assistance Program