Asurion
Director, Identity and Access Management
US-Headquarters · Director
Sponsorship not specifiedDetected 8 days ago
Cloud PlatformsDevOpsOAuthLLMsCybersecuritySOC OperationsLeadershipCommunication
About the role
- We are seeking a strategic and transformational Director of Identity & Access Management (IAM) to lead the evolution of our global identity security program in a modern, AI-enabled enterprise environment. This leader will oversee the design, governance, and operation of identity services across workforce, customer, partner, machine, and AI-agent ecosystems.
- The Director of Identity Governance and Privileged Access will lead the modernization of enterprise identity and access management at Asurion. This role owns strategy, roadmap, governance, control design, and execution oversight across identity lifecycle management, access governance, privileged access, access reviews, non-human identity governance, and
Responsibilities
- Own enterprise identity governance strategy and lead migration from SailPoint on-premise to SailPoint Identity Security Cloud.
- Develop and execute the SailPoint cloud roadmap, including migration sequencing, integrations, operating model, stakeholder engagement, and post-migration optimization.
- Design risk-based access certification programs with campaign governance, remediation tracking, evidence retention, and escalation.
- Define and implement Segregation of Duties policies, control mappings, exceptions, and periodic validation.
- Own enterprise PAM strategy and CyberArk maturity roadmap.
- Lead privileged account discovery, onboarding prioritization, credential rotation, safe design, platform integrations, session recording, and privileged access reviews.
- Partner with Security Operations to enhance detection and monitoring for privileged misuse and anomalous admin behavior.
- Develop governance for service accounts, machine identities, API credentials, secrets, certificates, and cloud workload identities.
- Partner with Cloud, DevOps, Infrastructure, Application Engineering, and CyberArk teams to reduce unmanaged service accounts and increase visibility.
- Implement risk-based recertification focusing on privileged, internet-facing, sensitive data, and critical environments.
Nice to have
- Identity Governance and SailPoint Transformation
- Strengthen joiner/mover/leaver processes to ensure timely and complete provisioning, deprovisioning, access changes, and termination processing.
- Establish identity lifecycle assurance controls for provisioning accuracy, workflow failure handling, and manual access oversight.
- Improve entitlement governance by rationalizing roles, birthright access, privileged entitlements, toxic combinations, and excessive access.
- Privileged Access Management and CyberArk Maturity
- Reduce standing privilege through time-bound and just-in-time models with strong approval and monitoring.
- Operationalize privileged access policies for ownership, approvals, break-glass governance, session monitoring, password rotation, and exception expiration.
- Authentication, Federation, and Identity Assertion Governance
Benefits
- 20/20 corrected vision
- Expand SailPoint coverage across core systems, SaaS, cloud platforms, non-integrated and high-risk applications.
- Expand CyberArk coverage across infrastructure, directories, cloud, databases, applications, service and admin accounts, and emergency access paths.
- Define and track PAM KPIs/KRIs, including coverage, rotation compliance, standing privilege reduction, session recording, and onboarding progress.
Apply directly at Asurion →Create a free account for alerts like thisView Asurion immigration profile
This listing is sourced directly from Asurion's careers page and normalized into a canonical job model.