Manager, Identity & Access Management

The Manager, Identity Access Management (IAM) is responsible for overseeing the organization’s identity and access management risk framework and providing independent Second Line of Defense (2LOD) oversight of identity governance, access controls, privileged access management, and authentication practices. This role ensures IAM risks are appropriately identified, assessed, monitored, and managed in accordance with regulatory expectations, industry standards, and organizational risk appetite.

This position partners closely with Information Technology, Cybersecurity, Internal Audit, Compliance, and business stakeholders to evaluate IAM control effectiveness, assess emerging risks, and strengthen identity governance practices across the organization.

Here’s what you can expect from the job and what you need to be successful:

What You’ll Do:

• Oversee the IAM risk management program, including governance, risk assessments, control evaluations, and monitoring activities.
• Evaluate the design and effectiveness of identity and access management controls, including user provisioning, deprovisioning, role-based access controls, privileged access management, segregation of duties, and authentication controls.
• Provide independent challenge and oversight of first-line IAM processes and access governance decisions.
• Conduct risk assessments of IAM processes, technologies, systems, and emerging identity-related threats.
• Monitor IAM-related risk indicators, control performance metrics, exceptions, and remediation activities.
• Oversee periodic access certification and governance processes, ensuring compliance with policies and regulatory requirements.
• Review and challenge privileged access management programs, identity lifecycle management processes, and authentication controls.
• Partner with Information Security, Technology, Compliance, and Internal Audit to evaluate control effectiveness and remediation plans.
• Support regulatory examinations, audits, and independent reviews involving access management and cybersecurity controls.
• Develop and deliver reporting on IAM risk exposure, control effectiveness, and emerging risks to leadership and governance forums.
• Support development and maintenance of IAM risk policies, standards, and governance documentation.
• Identify opportunities to improve IAM governance, risk management practices, and control maturity.

• Required Education: Bachelor’s degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree), advanced degree preferred.
• Required Experience: 5+ years of relevant experience, 0 - 2 years as a People Leader
• Strong understanding of IAM governance and controls.
• Knowledge of access management, privileged access management, authentication, and identity lifecycle management.
• Understanding of cybersecurity frameworks (NIST, FFIEC, ISO, CIS).
• Experience assessing technology and cybersecurity risks.
• Strong analytical and problem-solving skills.
• Ability to influence stakeholders and provide effective challenge.
• Experience supporting audits, examinations, and regulatory reviews.

Preferred Certifications:

• CISSP
• CISA
• CRISC
• CISM

3.53.5 out of 5 stars 853 Donald J Lynch Boulevard, Marlborough, MA 01752 $116,500 - $140,000 a year - Full-time, Pulled from the full job description

• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance
• Paid holidays, Employees are eligible for:
• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: - You’ll accrue up to 15 days in your first year. In addition, you’ll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria

Every great journey begins with a bold idea-and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.