Identity Security Program Manager

Southern Company•Birmingham, GA

1d•Onsite

About The Position

Southern Company is seeking a highly organized, execution‑focused Identity Security Program Manager to help drive delivery and operational effectiveness of the enterprise Identity Security Program. This role will report to the Sr Manager of Identity Security and will serve as the program’s operational lead, ensuring strategic priorities are translated into clear plans, measurable outcomes, and reliable execution. This is a primarily on-site role with 4 days per week in-office presence expected. This position directly supports Southern Company’s mission to mitigate real and potential cyber risks to its critical electric and gas utility infrastructure, operational technology environments, enterprise IT systems, personnel, customers, and brand. The role partners closely with Cybersecurity, Technology, Legal, Privacy, Compliance, HR, and business stakeholders to enable cross‑functional alignment and consistent delivery. The Identity Security Program Manager will coordinate and drive execution across a portfolio of projects including identity lifecycle, governance, privileged access, vendor access, self-service, and non‑human/agentic identity initiatives. Success in this role requires strong program management fundamentals—planning, governance, stakeholder alignment, metrics, and continuous improvement—combined with the ability to operate in a highly regulated, mission‑critical enterprise environment. This role ensures disciplined delivery through clear roadmaps, defined milestones, and outcome‑based measurement to achieve predictable results and ongoing identity program maturity.

Requirements

Proven experience managing cybersecurity or technology programs for large‑scale enterprise initiatives.
5+ years of experience in program management, cybersecurity operations, or technology delivery roles.
Experience coordinating or supporting identity security capabilities such as IAM, IGA, PAM, authentication, authorization, or access governance programs.
Strong understanding of identity and access management concepts across on‑prem, cloud, SaaS, and hybrid environments.
Demonstrated ability to manage cross‑functional workstreams, dependencies, and competing priorities.
Communication and organizational skills, with the ability to produce executive‑ready status updates and reporting.
Ability to operate effectively in a matrixed organization without direct authority.
Must pass Insider Threat Protection background checks

Nice To Haves

Experience supporting or coordinating IAM, IGA, or PAM programs.
Familiarity with Zero Trust identity and access principles.
Experience developing program dashboards, KPIs, and operational reporting.
Experience coordinating identity initiatives with SOC, Incident Response, or GRC teams.
Familiarity with non‑human identities, workload identities, and service principals.
Experience supporting or securing highly regulated or critical infrastructure environments.
Working knowledge of authentication mechanisms, access controls, and identity lifecycle processes.

Responsibilities

Execute the enterprise Identity Security Program roadmap in alignment with strategic direction set by cybersecurity leadership.
Manage integrated program plans across identity lifecycle management, access governance, authentication, authorization, privileged access, and non‑human/workload identity initiatives, including milestones, dependencies, risks, and delivery timelines.
Establish and maintain program operating rhythms, including status reporting, risk and issue management, and action item tracking.
Implement and maintain operating models, workflows, and procedures to support effective and repeatable identity security program execution.
Coordinate cross‑functional delivery efforts across Cybersecurity, Technology, Cloud, Legal, Privacy, Compliance, HR, and business teams to ensure alignment and timely execution.
Ensure initiatives are operationally ready prior to scale or enforcement, including documented processes, runbooks, escalation paths, and communications.
Support enterprise efforts to define, implement, and govern identity standards and access models for human and non‑human identities.
Drive ongoing maturity of IAM, IGA, PAM, and access control capabilities by coordinating adoption, tuning, and remediation workflows to reduce risk while minimizing business friction.
Coordinate remediation activities for identified identity risks, including over‑privileged access, orphaned identities, excessive entitlements, and weak authentication controls.
Partner with SOC and Incident Response teams to support identity‑related alert triage, investigation workflows, and escalation processes.
Develop and maintain program metrics, dashboards, and reporting related to delivery progress, operational effectiveness, and identity security outcomes.
Support governance, change management, and exception processes for identity policies, controls, and enforcement actions.
Promote a culture of accountability, collaboration, and continuous improvement across identity program stakeholders.