> Markdown version of [/jobs/ext/1989679-manager-identity-access-management](https://www.wearedevelopers.com/jobs/ext/1989679-manager-identity-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Manager, Identity & Access Management - **Company:** Digital Federal Credit Union - **Location:** Chelmsford, MA, United States - **Experience:** Experienced - **Salary:** $116,500.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** User Authentication, Cyber Security, Identity and Access Management, User Provisioning Software, Information Technology - **Published:** August 8, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/87979646/1 ## About the Role * Required Education:Bachelor's degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree), advanced degree preferred. * Required Experience: 5+ years of relevant experience, 0 - 2 years as a People Leader * Strong understanding of IAM governance and controls. * Knowledge of access management, privileged access management, authentication, and identity lifecycle management. * Understanding of cybersecurity frameworks (NIST, FFIEC, ISO, CIS). * Experience assessing technology and cybersecurity risks. * Strong analytical and problem-solving skills. * Ability to influence stakeholders and provide effective challenge. * Experience supporting audits, examinations, and regulatory reviews. Preferred Certifications: * CISSP * CISA * CRISC * CISM ## Description The Manager, Identity Access Management (IAM) is responsible for overseeing the organization's identity and access management risk framework and providing independent Second Line of Defense (2LOD) oversight of identity governance, access controls, privileged access management, and authentication practices. This role ensures IAM risks are appropriately identified, assessed, monitored, and managed in accordance with regulatory expectations, industry standards, and organizational risk appetite. This position partners closely with Information Technology, Cybersecurity, Internal Audit, Compliance, and business stakeholders to evaluate IAM control effectiveness, assess emerging risks, and strengthen identity governance practices across the organization. Here's what you can expect from the job and what you need to be successful: What You'll Do: * Oversee the IAM risk management program, including governance, risk assessments, control evaluations, and monitoring activities. * Evaluate the design and effectiveness of identity and access management controls, including user provisioning, deprovisioning, role-based access controls, privileged access management, segregation of duties, and authentication controls. * Provide independentchallengeand oversight of first-line IAM processes and access governance decisions. * Conduct risk assessments of IAM processes, technologies, systems, and emerging identity-related threats. * Monitor IAM-related risk indicators, control performance metrics, exceptions, and remediation activities. * Oversee periodic access certification and governance processes, ensuring compliance with policies and regulatory requirements. * Review and challenge privileged access management programs, identity lifecycle management processes, and authentication controls. * Partner with Information Security, Technology, Compliance, and Internal Audit to evaluate control effectiveness and remediation plans. * Support regulatory examinations, audits, and independent reviews involving access management and cybersecurity controls. * Develop and deliver reporting on IAM risk exposure, control effectiveness, and emerging risks to leadership and governance forums. * Support development and maintenance of IAM risk policies, standards, and governance documentation. * Identify opportunities to improve IAM governance, risk management practices, and control maturity. ## Related Videos - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis) - [Secure and Accessible Login Systems - Ramona Schwering](https://www.wearedevelopers.com/videos/1847-secure-and-accessible-login-systems-ramona-schwering) ## Related Articles - [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager) - [The top 200 passwords of 2024 can be cracked in less than a second](https://www.wearedevelopers.com/magazine/502-the-top-200-passwords-of-2024-can-be-cracked-in-less-than-a-second) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Should Tech Managers Be Developers First? Pros and Cons](https://www.wearedevelopers.com/magazine/327-should-tech-managers-be-developers-first-pros-and-cons)