VP Identity Access Management

If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!

The Vice President of Identity and Access Management (IAM) leads the execution of SECU’s IAM strategy, translating enterprise priorities into secure, scalable solutions and measurable business outcomes. The VP is accountable for IAM strategy execution, application integration, engineering delivery, AI-related identity governance, and control effectiveness while directly leading engineers, architects, and principal-level individual contributors. This role partners with technology, cyber defense, risk, compliance, and business leaders to advance SECU’s technology transformation and strengthen enterprise identity security.

Essential Responsibilities:

- 25% IAM Strategy Execution, Architecture, and Delivery: Translate SECU’s enterprise IAM strategy into prioritized initiatives, implementation roadmaps, delivery plans, milestones, and measurable outcomes aligned with the SVP, Head of IAM and overall Information Security program. Establish architectural direction, engineering standards, and reusable control patterns across on-premises, cloud, and hybrid environments. Drive execution against strategic commitments, ensuring delivery timelines, quality, and resources align with priorities. Proactively resolve dependencies and blockers, manage delivery risks, and escalate material issues with mitigation plans.

- 25% Identity Governance, Access Management, and Application Integration: Lead delivery and continuous improvement of identity lifecycle management, provisioning and deprovisioning, access reviews, single sign-on (SSO), multifactor authentication (MFA), privileged access management (PAM), service accounts, and non-human identities. Drive efficient, standardized application onboarding through reusable integration patterns, connectors, APIs, and automation. Establish and implement IAM controls for AI-enabled applications, AI agents, and other non-human identities, including identity registration, authentication, authorization, least-privilege permissions, credential management, lifecycle governance, monitoring, and periodic access reviews. Ensure AI-related access is approved, traceable, auditable, and aligned with SECU security policies. Partner with application owners and engineering teams to deliver secure integrations on schedule, reduce manual effort and implementation time, and ensure successful operational handoff.

- 15% Risk Management, Compliance, and Control Effectiveness: Ensure IAM solutions meet SECU security policies, enterprise standards, and applicable regulatory requirements. Partner with Risk, Compliance, and Audit to assess identity risks, maintain audit readiness, and remediate control deficiencies. Monitor control performance and establish key performance indicators (KPIs) and key risk indicators (KRIs). Ensure AI-related identities, permissions, and access workflows are governed by appropriate security, privacy, risk, and audit controls. Escalate material risks and provide actionable recommendations to the SVP, Head of Identity Access Management.

- 15% Technical Leadership and Talent Development : Directly lead, mentor, and develop engineers, architects, and principal-level individual contributors. Establish performance expectations, technical accountability, career development, and succession plans. Align team capacity with IAM strategic initiatives, application onboarding demand, AI-related identity requirements, operational commitments, and technical debt reduction. Foster engineering excellence, collaboration, continuous learning, and accountability for delivery outcomes.

- 10% Engineering Execution, AI Enablement, and Operational Excellence: Establish delivery practices and metrics to monitor milestones, throughput, schedule adherence, application integration cycle time, quality, and resource utilization. Drive automation and process optimization across application onboarding, identity administration, access workflows, and reporting. Evaluate and implement AI-enabled capabilities that improve IAM automation, access governance, access review efficiency, anomaly detection, and operational decision-making, subject to security, privacy, and governance requirements. Ensure IAM services meet reliability and performance expectations, and that incident management, root-cause analysis, documentation, and business continuity practices support resilient operations.

- 10% Executive Engagement and Enterprise Alignment: Partner with senior technology, security, risk, compliance, and business leaders to align IAM initiatives with enterprise priorities, resolve cross-functional dependencies, and accelerate adoption of IAM capabilities. Communicate strategy execution progress, resource needs, investment recommendations, control effectiveness, AI-related identity risks, and delivery outcomes in business terms. Represent IAM in governance forums and maintain alignment with the SVP’s enterprise direction and SECU’s business objectives.

Required Education & Experience (Knowledge, Skills, & Abilities):

- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field, or an equivalent combination of education and experience. At least 10 years of progressive IAM experience, including 7 years leading information security or technology teams plus additional 1 year in supervisory, lead, or mentor role. Demonstrated success executing enterprise IAM strategies, delivering complex initiatives, and leading senior technical professionals in highly regulated environments.

- Strong knowledge of identity governance and administration (IGA), identity lifecycle management, provisioning, access certification, privileged access management, SSO, MFA, service accounts, and identity federation. Experience with known IAM platforms; cloud and hybrid infrastructure; Lightweight Directory Access Protocol (LDAP); Security Assertion Markup Language (SAML); and API-based integrations. Experience implementing scalable IAM integrations and governing access for AI-enabled applications, AI agents, and other non-human identities, including authentication, authorization, credential management, least privilege, and lifecycle controls. Ability to apply security and governance requirements to AI-related access while maintaining auditability and regulatory compliance.

- Proven ability to translate strategic objectives into executable roadmaps, manage dependencies and resources, resolve blockers, and deliver measurable outcomes. Strong technical judgment, risk analysis, troubleshooting, and incident management skills. Ability to coach and develop individual contributors, establish delivery KPIs and KRIs, manage competing priorities, and communicate effectively with executives, technical teams, and business stakeholders. Proficiency with Microsoft Office, Jira, Confluence, or comparable tools.

Preferred Education & Experience (Knowledge, Skills, & Abilities):

- Master’s degree in a related discipline and/or relevant certifications such as CISSP, CISM, CCSP, CCSK, SANS GSEC, or other IAM and information security credentials.
- Experience in a credit union, banking, or other regulated environment. Familiarity with NIST, ISO/IEC 27001, PCI DSS, COBIT, and related security frameworks, including audit readiness and regulatory remediation.
- Experience implementing AI-enabled security or IAM solutions, governing AI agent identities and delegated permissions, and applying zero-trust principles to AI workloads, machine identities, and automated service interactions. Experience with large-scale IAM modernization, cloud identity governance, and automated provisioning. Demonstrated success improving application onboarding throughput, integration cycle time, engineering quality, and delivery predictability.

Job Environment & Physical Requirements:

- Primarily an office environment with physical proximity to other employees; remote work arrangements are negotiable.
- Typical office noise may include conversations, copy machines, and telephones.
- The role requires regular engagement with executive leadership, business stakeholders, technology teams, regulators, auditors, vendors, and external partners.
- The position may require availability for significant cybersecurity incidents, executive briefings, regulatory matters, and other time-sensitive enterprise security events.

- Ability to comprehend and carry out verbal and written instructions.
- Ability to sit for extended periods.
- Ability to use hands and fingers to operate a computer keyboard and other office equipment.
- Ability to operate a telephone and comprehend telephone conversations.
- Ability to lift up to five pounds.

SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.

Disclaimer

State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.