Information Security Team Lead - IDAM

Central Hudson•City of Poughkeepsie, NY

About The Position

What is an Information Security Team Lead - IDAM? The Information Security Team Lead - IDAM (Identity & Access Management) in conjunction with organizational business units, is responsible for the planning, building, delivery, and support of the Identity and Access Management (IDAM) program. The Team Lead will provide direction and guidance to the development, specifications, and communications of the IDAM application and architecture, as well as provide in-depth technical consultation to the business units and IT management and assist in developing plans and direction for the integration of information security requirements. A key element of the Information Security Team Lead - IDAM role is working with leadership to proactively evaluate risks, identify operational weaknesses, and support resiliency and ongoing improvement of the company’s identity platforms. They will work proactively with business, Information Security, Infrastructure, and Application partners to implement solutions and processes that meet agreed-on security policies and standards. The Information Security Team Lead - IDAM should understand and articulate the impact of Identity and access management on digital and operational business and be able to communicate this to senior stakeholders. What does an Information Security Team Lead – IDAM do? Leads the IAM functional team and operation within the technology department to ensure consistent and high-quality management in support of the business and departmental goals Supports team members through effective coaching and development Facilitates the use of technology-based tools or methodologies to review, design, and/or implement products and services to provide a strong IAM program that balances access with compliance, confidentiality, and business requirements Identifies and evaluates complex business and technology risks, internal controls that mitigate risks, and related opportunities for internal control improvement Acts as subject-matter-expert on all IAM disciplines including identity governance and administration (IGA), Access Management (SSO, MFA), privileged access management, and identity verification Provides management status reporting to include accomplishments, plans for upcoming activities, and overall completion status on a regular basis ensuring all milestones and deliverables are achieved within communicated deadlines Owns the lifecycle management of all IAM technologies and solution components Develops and maintains documentation, runbooks, and standard operating procedures for identity services and processes Influences decision makers, including directors and VPs, through effective communication and documentation Envisions business outcomes and work with business leaders to create IAM business initiatives to improve role-based access controls and mitigate access risks Aligns IAM processes across the organization and develop and document standards for organizational use Understands business and information technology management processes and demonstrate advanced understanding of business processes, identity-first security, internal control risk management, IT controls, and related standards Fosters an understanding of the need for and application of the IAM system, and facilitates decision making with the business users Builds and nurtures positive working relationships with business units Identifies opportunities to improve engagement with the business units Provides support for storm restoration efforts

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or a related field of study and 3 years of relevant experience. In lieu of a bachelor’s degree, an associate degree in the aforementioned fields and 5 years of relevant experience or a high school diploma or equivalency degree and 7 years of relevant experience will be considered
Identity management familiarity in one or more of the following areas: Identity Management, single sign-on (SSO), multi-factor authentication (MFA), Identity/Account data management, identity federation, enterprise directory architecture and design, including directory schema, directory services, namespace and replication topology experience, resource provisioning, ITIL, and process integration
Experience administering Microsoft Active Directory, ADFS and Microsoft Entra ID
Experience with administrating standard authentication technologies such as Kerberos, Okta, OpenID Connect, OAuth, SAML, SCIM, and federated identity management
Expert understanding of IAM concepts, including federation, authentication, authorization, access controls, access control attacks, identity and access provisioning life cycle
Experience with automation tools or scripting languages used for identity tasks
Experience in creating and maintaining relationships with key stakeholders
Strong understanding of Information Security frameworks, best practices, and IAM security controls
Experience in communicating, defining, training, implementing, and improving IAM practices
Excellent communication skills, both written and oral; ability to interact effectively with individuals at all levels
Familiarity with regulatory requirements and compliance frameworks
Analytical mindset with the ability to assess complex situations and make informed decisions
Strong background in the intersection of business and IAM
Ability to influence decisions with data analytics and metrics
Results-oriented mindset with problem-solving and decision-making skills
Ability to work independently and respond to feedback professionally
Valid driver’s license

Nice To Haves

Proven leadership, facilitation, mentorship, and organizational skills with 2+ years in a leadership role
Experience in Energy & Utilities or services industry
Experience with Microsoft PowerBI
Experience with data visualization tools
Experience in risk management
Relevant certifications such as CISSP, CISM, or comparable

Responsibilities

Leads the IAM functional team and operation within the technology department to ensure consistent and high-quality management in support of the business and departmental goals
Supports team members through effective coaching and development
Facilitates the use of technology-based tools or methodologies to review, design, and/or implement products and services to provide a strong IAM program that balances access with compliance, confidentiality, and business requirements
Identifies and evaluates complex business and technology risks, internal controls that mitigate risks, and related opportunities for internal control improvement
Acts as subject-matter-expert on all IAM disciplines including identity governance and administration (IGA), Access Management (SSO, MFA), privileged access management, and identity verification
Provides management status reporting to include accomplishments, plans for upcoming activities, and overall completion status on a regular basis ensuring all milestones and deliverables are achieved within communicated deadlines
Owns the lifecycle management of all IAM technologies and solution components
Develops and maintains documentation, runbooks, and standard operating procedures for identity services and processes
Influences decision makers, including directors and VPs, through effective communication and documentation
Envisions business outcomes and work with business leaders to create IAM business initiatives to improve role-based access controls and mitigate access risks
Aligns IAM processes across the organization and develop and document standards for organizational use
Understands business and information technology management processes and demonstrate advanced understanding of business processes, identity-first security, internal control risk management, IT controls, and related standards
Fosters an understanding of the need for and application of the IAM system, and facilitates decision making with the business users
Builds and nurtures positive working relationships with business units
Identifies opportunities to improve engagement with the business units
Provides support for storm restoration efforts