Director - Identity/Privileged Access Mgmt

Description and Requirements
Position Overview:

• Strategic Oversight and Implementation: Lead the development of the PAM strategy and corresponding roadmaps considering the corporate strategy, industry security trends, and regulatory requirements. Establish a strategy and multi-year plan incorporating all parts of PAM: scan/discovery, remediation, lifecycle management, password rotation, password vaulting, just in time administration. Architect, design, develop and troubleshoot PAM solutions with the ability to provide technical and architectural design documentation, recommendations, specifications, use cases, requirements, and test cases. Create solutions that drive full automation, self-service, and resiliency. Work to improve and track the maturity of the IAM PAM products and capabilities showing increased adoption and resiliency. Lead the design, integration, and operationalization of PAM solutions, ensuring seamless implementation across diverse business units and technologies. Act as the primary liaison between technical teams, business units, and strategic stakeholders to advance PAM services within the organization.
• Automation: Develop and implement strategies for automating the provisioning, deprovisioning, and review processes for privileged accounts. Leverage business, security, and risk requirements to enhance process efficiency and drive continuous improvement initiatives, focusing on automation and streamlining across disparate systems.
• Metrics and Reporting: Establish key performance indicators (KPIs) and metrics to assess the effectiveness and adoption of PAM systems. Regularly produce and present comprehensive reports to leadership, highlighting progress, challenges, and opportunities for improvement in privileged access management initiatives.
• Financial Leadership: Direct the financial planning and execution for PAM services, including capital investments, technology refresh cycles, business-funded initiatives, contractor management, and personnel compensation. Ensure alignment with budgetary constraints and strategic objectives.
• Organizational Leadership: Manage a team of direct reports and contract service providers. Develop and implement staffing strategies to ensure the team is well-equipped with the necessary skills and capacity. Promote a culture of innovation and continuous improvement, ensuring team members are qualified, trained, and aligned with organizational goals.
• Risk Management: Identify and assess privileged access related risks and vulnerabilities and develop strategies to mitigate these risks. Maintain a continuous review of privileged account hygiene and metrics behind stale and out of compliance accounts. Respond to security incidents related to privileged account compromise and lead investigations to determine root causes and remediation actions.

Required:

• 5 - 6 + years of experience in IT/IAM/cybersecurity.
• 5+ years of experience focused specifically on privileged access management (PAM) in organizations with greater than 10,000 users and/or 5+ years Cloud identity and secrets management.
• Minimum of 3 - 4 years of experience leading teams, managing cross-functional projects, and interacting with senior stakeholders. Experience in managing both direct reports and external service providers.
• Bachelor's degree in a relevant discipline.
• Demonstrated ability to develop and execute strategic plans that align with organizational goals and industry leading practices.
• Excellent verbal and written communication skills, with the ability to effectively present complex technical concepts to non-technical stakeholders and senior management.

Preferred:

• In-depth understanding of regulatory requirements and industry standards related to data protection and privacy, including GDPR, CCPA, HIPAA, and SOX.
• Preference for experience in regulated industries such as financial, auditing, or healthcare companies.
• Strong background in integrating PAM solutions with diverse IT environments including Cloud, On-Premises, IaaS, and SaaS platforms (Entra, AWS).
• Extensive experience with PAM solutions and platforms such as CyberArk, including their design, implementation, and operational management.
• Proven experience in developing, implementing, and enforcing security policies and procedures to ensure compliance with applicable laws and regulations.
• Proficiency with related security technologies and practices, including Identity and Access Management (IAM), Multi-Factor Authentication (MFA), Single Sign-On (SSO), and threat detection.
• Strong analytical and problem-solving skills, with a proactive approach to identifying and addressing security risks and operational challenges.
• Ability to work collaboratively across various departments and teams, fostering a culture of security awareness and continuous improvement.
• Professional certifications such as CISSP, CISM, CIAM, or certifications in PAM tools (e.g. CyberArk Certified Delivery Engineer) are highly desirable.

The salary range for applicants for this position is $110,000 - $185,000.
Benefits We Offer
Our U.S. benefits address holistic well-being with programs for physical and mental health, financial wellness, and support for families. We offer a comprehensive health plan that includes medical/prescription drug and vision, dental insurance, and no-cost short- and long-term disability. We also provide company-paid life insurance and legal services, a retirement pension funded entirely by MetLife and 401(k) with employer matching, group discounts on voluntary insurance products including auto and home, pet, critical illness, hospital indemnity, and accident insurance, as well as Employee Assistance Program (EAP) and digital mental health programs, parental leave, volunteer time off, tuition assistance and much more!
About MetLife
Recognized on Fortune magazine's list of the 2024 "World's Most Admired Companies", Fortune World's 25 Best Workplaces™ for 2024, as well as the 2024 Fortune 100 Best Companies to Work For ®, MetLife , through its subsidiaries and affiliates, is one of the world's leading financial services companies; providing insurance, annuities, employee benefits and asset management to individual and institutional customers. With operations in more than 40 markets, we hold leading positions in the United States, Latin America, Asia, Europe, and the Middle East.
Our purpose is simple - to help our colleagues, customers, communities, and the world at large create a more confident future. United by purpose and guided by empathy, we're inspired to transform the next century in financial services. At MetLife, it's #AllTogetherPossible . Join us!
MetLife is an Equal Opportunity Employer. All employment decisions are made without regards to race, color, national origin, religion, creed, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, marital or domestic/civil partnership status, genetic information, citizenship status (although applicants and employees must be legally authorized to work in the United States), uniformed service member or veteran status, or any other characteristic protected by applicable federal, state, or local law ("protected characteristics").
If you need an accommodation due to a disability, please email us at accommodations@metlife.com. This information will be held in confidence and used only to determine an appropriate accommodation for the application process.
MetLife maintains a drug-free workplace.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liabilities.
$110,000 - $185,000