> Markdown version of [/jobs/ext/4331433-information-security-professional-iv-lead](https://www.wearedevelopers.com/jobs/ext/4331433-information-security-professional-iv-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Professional IV, Lead - **Company:** University of Central Florida - **Location:** Alafaya, FL, United States - **Experience:** Expert - **Salary:** $104,664.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Identity and Access Management, Role-Based Access Control, Enterprise Software Applications, Software Security - **Published:** October 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=368b6bf9ea9ab61d ## About the Role Bachelor's degree and 5 years of relevant experience; or High School Diploma (or equivalent) and 9 years of relevant work experience in lieu of degree or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6) ., * Experience leading Identity Governance and Access Management (IGA) programs in a large, complex organization. * Experience with identity lifecycle management, role-based access control, and access review processes. * Knowledge of privileged access management (PAM), identity governance, and authorization frameworks. * Experience supporting ERP and enterprise application security. * Familiarity with security governance, compliance, risk management, and audit activities. * Experience supervising or leading technical security teams. * Strong analytical, communication, and stakeholder engagement skills. Special Instructions to the Applicants: Position requires a valid Class E driver's license. This position may involve driving to various locations on and off campus to conduct University business. ## Description University Operations is seeking to hire an Information Security Professional IV, Lead. This role serves as the technical and operational leader for the Identity Governance and Access Management (IGA) function within UCF's Information Security Office. This position oversees identity security operations, manages a team of security professionals, and leads enterprise-wide initiatives that govern access to university systems, applications, and data. The role provides senior-level leadership for identity lifecycle management, access governance, privileged access controls, compliance initiatives, and security improvements that reduce institutional risk while ensuring users receive appropriate access based on their roles and affiliations., Identity Governance & Access Management Leadership * Lead the design, governance, and continuous improvement of identity governance and access management services. * Oversee access request processes, role-based access control (RBAC), entitlement management, authorization standards, and access review programs. * Ensure identity-related controls support security, compliance, and operational objectives. Team Leadership & Operations * Provide day-to-day leadership for the Identity Governance and Access Management team. * Assign and prioritize work, review deliverables, coach and mentor staff, and support professional development. * Ensure consistent, high-quality service delivery and operational coverage. Identity Lifecycle & Access Control * Serve as the senior technical lead for identity lifecycle processes, including joiner, mover, leaver, guest, affiliate, and sponsored account workflows. * Provide direction for provisioning, de-provisioning, affiliation management, and access control enhancements. * Promote secure, timely, and appropriate access across university systems. Privileged Access Governance * Provide governance and oversight for privileged accounts, service accounts, machine identities, service principals, and administrative access. * Establish standards, review exceptions, and support audit readiness activities. * Ensure high-risk access is appropriately approved, documented, monitored, and reviewed. Security, Compliance & Risk Management * Lead security design decisions related to identity and access management controls. * Evaluate control gaps and recommend solutions that strengthen security and reduce risk. * Align identity governance practices with institutional policies, compliance requirements, and audit expectations. Enterprise Application Security * Provide oversight for access models and authorization controls supporting ERP and other enterprise applications. * Partner with business units, security teams, and technical stakeholders to improve access governance and application security. * Help reduce over-provisioning and under-provisioning while supporting business needs. Reporting, Audits & Continuous Improvement * Lead reporting and analytical efforts related to identities, roles, entitlements, privileged access, and access review outcomes. * Support internal audits, compliance reviews, and external assessments through the development of reports and evidence packages. * Maintain policies, procedures, standards, and knowledge resources while driving continuous process improvement initiatives.