Senior Manager, Identity Governance

Universal Music Group•Nashville, TN

2d•$122,150 - $200,000•Hybrid

About The Position

The Senior Manager, Identity Governance & Administration leads UMG’s Identity Governance and Administration capability and serves as the enterprise IAM deputy for governance, operating model, roadmap, and execution. The role is accountable for the security, effectiveness, scalability, and continuous improvement of UMG’s IGA processes and platforms, with primary responsibility for Saviynt and related identity-governance capabilities. It is an identity-security leadership role focused on treating identity as a foundational security control and enterprise risk domain, ensuring identity data, access decisions, entitlements, workflows, lifecycle events, and governance evidence reduce cyber risk, support business outcomes, and enable sustainable global operations. The Senior Manager directly leads the IGA/Saviynt team and mentors leaders and practitioners across other identity product functions. Reporting to the VP, Security & Identity, the role works as a peer leader with the Sr. Security & Identity Architect. It owns IGA strategy, operating model, platform outcomes, and control execution, partnering with the Architect to align IGA capabilities with broader identity-security architecture, standards, and technology strategy. The role calls for a business and technical leader able to challenge designs, diagnose complex issues, translate cyber risk into practical decisions, lead through influence, and build trusted relationships across security, technology, business, audit, compliance, HR, application, and regional stakeholders. The role is based in Nashville and requires in-office attendance Tuesday through Thursday.

Requirements

At least 10 years of progressive experience in IAM, IGA, cybersecurity, technology risk, security architecture, consulting, or a closely related field; equivalent education and experience may be considered.
At least 5 years leading enterprise IAM, IGA, security-governance, product, consulting, or technology-risk programs, including leading teams or complex cross-functional workstreams.
Production experience with Saviynt, SailPoint, or another IGA platform, including administration or configuration, User Access Reviews and access-certification campaigns, workflows, reporting, troubleshooting, integrations, and continuous improvement.
Strong practical knowledge of Saviynt or another enterprise IGA platform.
Deep understanding of identity-governance processes and controls, including joiner-mover-leaver, access requests and approvals, provisioning and deprovisioning, UAR and certifications, roles and entitlements, segregation of duties, least privilege, exception management, auditability, and control evidence.
Understanding of identity data ownership, authoritative sources, synchronization and reconciliation, data-quality management, and dependencies among HR, directories, IGA platforms, applications, cloud services, and service-management platforms.
Experience governing human and non-human identities, including service accounts, application accounts, shared accounts, technical identities, and machine-to-machine access.
Ability to understand and challenge technical designs, diagnose complex workflow or integration issues, assess tradeoffs, and distinguish sustainable control improvements from short-term operational workarounds.
Experience translating business needs, security risks, control requirements, audit findings, and architectural direction into practical roadmaps, functional requirements, operating processes, and measurable outcomes.
Business and technical consulting experience, preferably across multiple industries, complex enterprises, or geographically distributed and matrixed organizations.
Experience partnering with security architects, engineers, application owners, HR, business leaders, audit, compliance, risk, and external vendors.
Strong program and product-management skills, including managing concurrent priorities, dependencies, roadmaps, releases, risks, issues, decisions, and stakeholder expectations.
Excellent written and verbal communication skills, including explaining technical identity issues and cyber risk to business stakeholders, technology teams, executives, auditors, and control owners.
Leadership skills and ability to influence without authority, build trusted relationships, resolve conflict, drive accountability, and lead organizational change.
Experience supporting audits, compliance activities, control testing, risk assessments, remediation plans, and evidence requirements in an IAM, IGA, cybersecurity, or technology-risk environment.
Strong analytical and problem-solving skills, including identifying patterns, evaluating data quality and control performance, determining root cause, and coordinating practical solutions.
Exceptional organization, attention to detail, documentation discipline, and follow-through; ability to work independently with strong accountability.

Nice To Haves

Bachelor’s degree in cybersecurity, information systems, computer science, business, risk management, or a related field, or comparable education and experience.
Relevant Identity & Access Management business and/or technical certifications, publications, or speaking experience.
Experience with both Saviynt and SailPoint.
Experience with adjacent identity and security technologies and data sources, including Workday or another HR system, Active Directory, Microsoft Entra ID, Okta, ServiceNow, privileged access management, cloud platforms, enterprise directories, and application-integration services.
Working knowledge of identity and security protocols and integration patterns such as SAML, SCIM, OAuth, OpenID Connect, LDAP/LDAPS, APIs, and event-driven integrations.
Experience with reporting, analytics, and work-management tools such as Jira, Confluence, Monday, and ServiceNow.
Relevant certifications such as CISSP, CISM, CRISC, CGEIT, ITIL, or a comparable IAM, security, risk, or governance credential.
Experience operating in a large, global, matrixed organization and leading governance-process change, user adoption, or enterprise transformation.

Responsibilities

Lead the strategy, operating model, roadmap, governance, and day-to-day execution of UMG’s Identity Governance and Administration program.
Serve as the enterprise IAM deputy to the VP, Security & Identity, aligning identity governance, identity engineering, access management, privileged access, authentication, and related identity product functions around shared security outcomes and priorities.
Lead, coach, and develop the IGA/Saviynt team; establish priorities, clarify accountability, remove obstacles, and promote a collaborative, security-minded culture.
Partner with the Sr. Security & Identity Architect to evaluate identity-security designs, establish standards and patterns, prioritize roadmap investments, and translate architectural direction into sustainable capabilities and processes.
Serve as business and governance product owner for Saviynt and related IGA capabilities, defining requirements and managing roadmaps with engineering teams, implementation partners, and vendors.
Own the end-to-end lifecycle of Saviynt User Access Review campaigns, including scope, data validation, reviewer and owner assignment, launch, reminders, escalations, remediation, certification, evidence, and closure.
Establish and maintain the UAR campaign calendar and readiness process, confirming application data, entitlements, owners, reviewers, communications, dependencies, and support processes are ready before launch.
Improve joiner, mover, and leaver processes, including identity creation, change detection, access updates, termination, deprovisioning, exception handling, and evidence of timely execution.
Govern access-request, approval, provisioning, deprovisioning, and recertification processes across applications, infrastructure, cloud platforms, and enterprise services.
Establish governance for roles, entitlements, access packages, privileged-access relationships, segregation-of-duties policies, high-risk access, service accounts, application accounts, and other non-human identities.
Define and improve data ownership models for authoritative identity sources, application accounts, entitlements, organizational attributes, manager relationships, and access metadata.
Improve data synchronization and reconciliation across HR, directories, identity platforms, applications, cloud services, service-management platforms, and other systems of record.
Monitor and improve data quality, connector health, reconciliation, workflow execution, notifications, reporting, access removal, and user experience; identify root causes and coordinate sustainable resolutions.
Translate policy, control, audit, risk, architecture, and business requirements into functional requirements, user stories, acceptance criteria, test plans, implementation plans, operating procedures, and support models.
Manage and prioritize the Saviynt enhancement, defect, integration, and technical-debt backlog using cyber risk, business impact, control effectiveness, resilience, user experience, and implementation complexity.
Establish governance for platform releases, configuration and workflow changes, integrations, access models, and other changes that may affect identity-security controls.
Define and report metrics, key performance indicators, and risk indicators for campaign completion and timeliness, exceptions, remediation aging, access-removal effectiveness, data quality, orphaned ownership, workflow and integration health, control performance, and vendor service levels.
Provide concise updates to governance forums and senior leadership on readiness, status, risks, issues, exceptions, remediation, decisions required, and the business impact of unresolved identity risks.
Partner with application and entitlement owners, business reviewers, IAM Engineering, Security Architecture, Security Operations, GRC, Audit, Compliance, HR, Service Management, regional IT teams, and external providers to drive accountability and results.
Support audits, control testing, regulatory inquiries, and risk assessments; respond to findings, develop remediation plans, and track corrective actions through closure.
Maintain governance documentation, including standards, procedures, RACI and data-ownership models, campaign playbooks, workflow documentation, communication templates, issue and decision logs, training materials, and audit evidence.
Lead stakeholder adoption and process change, using feedback and operational data to simplify processes without weakening identity-security controls.
Provide business and technical consulting on identity governance, explaining cyber risk, control intent, technical tradeoffs, and practical paths forward.
Mentor leaders and practitioners across the broader identity product organization through shared practices, design reviews, technical coaching, and career development.
Manage strategic vendors and service providers, setting expectations for deliverables, quality, service levels, issue resolution, roadmap alignment, and escalation.
Balance operational stability, control execution, platform modernization, project delivery, and strategic improvement in a global, fast-paced, geographically distributed environment.

Benefits

Comprehensive medical, dental, and vision coverage.
100% coverage for out-patient in-network mental health services.
Fertility coverage for eligible medical plan participants.
Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and more, up to $720 per year.
Student Loan Repayment Assistance and Tuition Reimbursement.
401(k) with 100% immediate vesting on the first 5% of employee contributions, plus an additional UMG contribution.
Flexible Paid Time Off for exempt employees.
Three weeks of PTO for non-exempt employees.
Two weeks of paid Winter Break.
Ten company holidays, including Juneteenth and Wellbeing Day.
Summer Fridays between Memorial Day and Labor Day.
Generous paid parental leave for every type of parent.