> Markdown version of [/jobs/ext/2697662-lead-information-security-operations-specialist](https://www.wearedevelopers.com/jobs/ext/2697662-lead-information-security-operations-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Information Security Operations Specialist - **Company:** Teachers Insurance and Annuity Association of America (TIAA) - **Location:** Charlotte, NC, United States - **Experience:** Expert - **Salary:** $108,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Spreadsheets, Cloud Computing Security, Cyber Security, Data Security, Identity and Access Management, Network Security, Machine Learning, Role-Based Access Control, Recommender Systems, Information Technology, SailPoint - **Published:** September 3, 2026 - **Apply:** https://tiaa.wd1.myworkdayjobs.com/Search/job/Charlotte-NC-USA/Lead-Information-Security-Operations-Specialist_R260800312 ## About the Role * University (Degree) Preferred, * 5+ years of IT or information security experience * 3+ years of experience leading or supporting Identity Governance and Administration (IGA) programs, including access certification campaigns * Hands-on experience with Saviynt and/or SailPoint IdentityIQ * Demonstrated experience implementing or overseeing Segregation of Duties (SoD) rules and Role Based Access Control (RBAC) frameworks * Strong understanding of the principle of least privilege and its application within enterprise access governance programs * Experience partnering with cross-functional teams, including application owners and Lines of Business, to gather and translate access governance requirement Preferred Skills * Direct hands-on experience with Saviynt strongly preferred, given the organization's active migration from SailPoint IdentityIQ * Experience leading application scoping and onboarding processes for an enterprise IGA platform * Experience applying access certification controls to decentralized or manually managed applications outside of a centralized IGA tool * Experience leveraging AI or machine learning capabilities to streamline access reviews, including outlier detection and access recommendation engines * Experience governing access for Non-Human Identities (NHIs), such as service accounts, bots, or AI agents * Bachelor's degree in Information Security, Computer Science, or a related field Related Skills Accountability, Adaptability, Business Continuity Planning, Cloud Computing Security, Collaboration, Communication, Compliance, Consultative Communication, Cybersecurity, Detail-Oriented, General Risk Management, Network Security, Prioritizes Effectively ## Description The Lead Information Security Operations Specialist leads the organization's IAM Access Certification program, ensuring that user access across applications and platforms adheres to the principle of least privilege. Working under limited supervision, this individual contributor role serves as the subject matter expert for access governance, driving the design, implementation, and continuous improvement of certification campaigns, Segregation of Duties (SoD) controls, and Role Based Access Control (RBAC) frameworks. This role partners closely with application teams, Lines of Business, and enterprise IAM leadership to ensure consistent, high-quality access governance across both centralized and decentralized applications, including support for the organization's transition from SailPoint IdentityIQ to Saviynt., * Leads the end-to-end strategy and execution of the IAM Access Certification program, ensuring certification campaigns are conducted with consistent cadence and rigor across both centralized (IGA-onboarded) and decentralized applications. * Leads application scoping efforts to determine onboarding eligibility to the centralized IGA platform and, where applicable, identifies the appropriate integration type. * Oversees the build-out, implementation, and ongoing operational health of Segregation of Duties (SoD) rules and Role Based Access Control (RBAC) profiles, partnering with application teams and Lines of Business who are responsible for defining the underlying SoD and RBAC requirements. * Leads user access review campaigns to enforce the principle of least privilege, ensuring individuals retain only the access required to perform their job responsibilities. * Applies the same access certification standards, cadence, and rigor to decentralized applications not onboarded to the centralized IGA platform, including those currently managed through manual, email, or spreadsheet-based processes, and drives improvements to standardize and streamline these processes over time. * Identifies and implements opportunities to leverage AI-enabled capabilities, including those native to Saviynt, to improve certification efficiency and accuracy through outlier detection, access recommendations, and other intelligent review mechanisms. * Establishes and matures certification practices for Non-Human Identities (NHIs), including service accounts and AI agents, ensuring appropriate ownership, review, and governance controls are in place. * Serves as the subject matter expert on IAM access governance, providing mentorship and guidance to other IT security team members supporting the certification program. * Supports the organization's migration from SailPoint IdentityIQ to Saviynt, including validating that access certification, SoD, and RBAC capabilities are properly configured and operational within the new platform. * Coordinates with internal audit and information security assessment teams to identify weaknesses in access governance processes and strengthens existing controls accordingly. * Conducts analysis of organizational needs and goals to guide the ongoing development of access certification, SoD, and RBAC capabilities. * Identifies and evaluates emerging data access control technologies, techniques, and safeguards relevant to identity governance and access certification. ## Related Videos - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Launching a marketplace on-time: A lesson in taking shortcuts using spreadsheets!](https://www.wearedevelopers.com/videos/477-launching-a-marketplace-on-time-a-lesson-in-taking-shortcuts-using-spreadsheets) - [Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing](https://www.wearedevelopers.com/videos/100108-building-sovereign-ai-lessons-from-deploying-secure-rag-systems-using-confidential-computing) - [From Global Capability Centers to AI-Powered Command Centers](https://www.wearedevelopers.com/videos/100096-from-global-capability-centers-to-ai-powered-command-centers) - [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc) ## Related Articles - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)