Senior Director - Global Identity & Access Management

Sysco

About The Position

The Senior Director of Global Identity & Access Management is accountable for supporting Cybersecurity in Sysco’s enterprise environment. This role assists with the planning, execution, and operation of Cybersecurity initiatives and functions within enterprise Identity and Access Management services provided by IT and reports directly to the CISO. Additionally, the team will identify gaps in controls, inefficiencies, exceptions, and inform the Cybersecurity Risk and Compliance Management Team.

Requirements

15+ years of experience in Cybersecurity and or information risk management
10+ years experience with Identity & Access Management
Experience establishing and maintaining budgets
Experience managing large, complex, global projects
Excellent communication skills, with an ability to tailor and engage communication across all levels of the organization
Background and familiarity with design and implementation of Single Sign On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) controls and platforms.
Fluency in written and spoken English.

Nice To Haves

Certified Information on Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP)

Responsibilities

Develop and maintain the budget which operates the team
Manage and maintain Sysco’s IAM program and global team including IAM operations center, vendor relationships, and the necessary technology
Act as the lead on all major IAM incidents
Ensure 24x7 operations of IAM tools and processes
Assist initiatives related to security awareness and buy-in through IAM and enterprise operations, facilitating staff to support security operations within enterprise and across IAM services, coordination of business apps utilized across enterprise, and functions in the design of security controls relevant to Account provisioning/deprovisioning, Single Sign On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) platforms, and Key Management
Support the operation of enterprise access management services provided by IT, including Single Sign On (SSO), Multi- Factor Authentication (MFA), and Privileged Access Management (PAM) platforms.
Provide reporting to leadership regarding the status of security relevant IAM operational metrics and strategic initiatives.
Coordinate Enterprise IAM initiatives with Cybersecurity initiatives.
Provide feedback on Cybersecurity controls and Standards applying to the enterprise environment, in coordination with Security Architecture & Engineering, and the Cybersecurity Risk and Compliance Management functions.
Oversee operation of security controls and processes within the IAM environment as designated by the CISO and in accordance with negotiated SLAs.