> Markdown version of [/jobs/ext/2708314-vp-of-identity-access-management-iam](https://www.wearedevelopers.com/jobs/ext/2708314-vp-of-identity-access-management-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # VP of Identity & Access Management (IAM) - **Company:** Cross River - **Location:** Fort Lee, United States - **Experience:** Experienced - **Salary:** $180,000.0 - $230,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Cyber Security, Identity and Access Management, Python (Programming Language), OAuth, OpenID, PCI Data Security Standards, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Cloud Services, Security Assertion Markup Language (SAML), Systems Integration, Scripting, Okta, Cyberark, HR Software, SailPoint, Workday, Servicenow - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/vp-identity-access-management-cross-river-8012301 ## About the Role * 10+ years in IAM, Information Security, or IT Risk roles, with 3+ years in a people management or technical leadership capacity. * Hands-on experience with IAM platforms (e.g., SailPoint, Saviynt, Azure AD, CyberArk, Okta), ideally in a financial services or regulated environment. * Deep knowledge of identity lifecycle automation, JML workflows, RBAC, ABAC, SSO, MFA, and PAM principles. * Proven success aligning IAM strategy with risk, audit, and compliance functions. * Familiarity with scripting or automation (PowerShell, Python) and modern identity protocols (SAML, OAuth2, OIDC, SCIM). * Strong communication, influencing, and documentation skills; able to evangelize IAM to both technical and business audiences. * Experience implementing or integrating with HRIS systems like Workday and ITSM systems like ServiceNow is a plus. * Certifications preferred: CISSP, CISM, or vendor-specific IAM certs. ## Description Cross River Bank is seeking a VP of Identity & Access Management (IAM) to build and lead a modern, risk-aligned, and automation-forward IAM program. Reporting to the VP of IT Security Engineering, this strategic and technical leader will drive the design, governance, and execution of IAM capabilities across our cloud, on-premises, and SaaS environments. This role will be instrumental in maturing our identity lifecycle management, enforcing least privilege, and enhancing secure access governance-while ensuring compliance with FFIEC, SOC 2, PCI DSS, and other regulatory standards., Strategy & Leadership * Define and own the bank's IAM vision, roadmap, and architecture, aligned with security, compliance, and business goals. * Build, lead, and mentor a small but high-performing IAM team, fostering a culture of collaboration, innovation, and accountability. * Champion secure and scalable IAM practices across business units, product teams, and infrastructure domains. * Partner with Engineering and Compliance to enhance identity governance maturity. Lifecycle Management & Automation * Oversee the design and automation of Joiner-Mover-Leaver processes. * Drive implementation of access request workflows and access reviews through tools like ServiceNow, with tight policy enforcement and auditability. * Reduce identity sprawl by enforcing role-based and attribute-based access controls (RBAC/ABAC). * Support federated SSO and MFA rollout across all SaaS applications to eliminate shadow IT. Privileged Access & Governance * Lead the rationalization and control of privileged access across AWS, Azure (PIM), and legacy AD environments. * Partner with Security Engineering and Audit to execute regular access reviews and design SoD frameworks. * Define access certification cycles with actionable outputs for business owners. Cloud & SaaS Identity * Guide cloud identity strategies for Azure, AWS, and SaaS ecosystems to ensure secure and scalable access models. * Collaborate with Engineering to securely onboard new SaaS vendors under centralized identity management and SSO. Audit & Compliance * Maintain IAM controls to meet FFIEC, SOC 2, and PCI DSS standards, and respond effectively to FDIC audits. * Establish clear KPIs and metrics for IAM hygiene, access review coverage, and lifecycle automation. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [We adopted DevOps and are Cloud-native, Now What?](https://www.wearedevelopers.com/videos/485-we-adopted-devops-and-are-cloud-native-now-what) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)