Ready to turn identity risk into business confidence? As Senior Manager, Identity & Privileged Access Governance, you will develop how people, services, and automation systems gain and use access. This role protects critical assets and supports business priorities. You’ll influence executive decisions, build a high-performing governance team, and modernize how we lead identity risk by implementing automated processes, ongoing oversight, and clear accountability. This position is in Richmond, VA with a hybrid work schedule, but we will consider a remote working arrangement for the ideal applicant.

This is a governance leadership role, not hands-on platform administration. You’ll develop policies, standards, and control frameworks for identity and access management and privileged access management while collaborating with Identity Engineering, Infrastructure and Cloud Operations, Information Security, Human Resources, Technology Security and Compliance, Internal Audit, External Audit, and business teams to improve access governance and achieve measurable risk reduction.

What you will be doing:

• Setting the enterprise IAM/PAM governance strategy, policies, control framework, and multi-year roadmap while prioritizing investments and resources based on risk reduction, business value, and delivery capacity.
• Establishing clear control ownership, independent review, and decision rights across business and technology teams while advancing least privilege, segregation of duties, and appropriate administrative access controls.
• Leading governance for identity lifecycle, access certification, privileged access, and account ownership while holding control owners accountable for timely access changes, disablement, revocation, and remediation.
• Advising privileged-account governance across administrator, shared, emergency, default, and local accounts while setting expectations for credential protection, authentication controls, session monitoring, exception management, and coverage.
• Driving audit readiness, management control assurance, systemic root-cause remediation, and exception governance while providing executives with clear access to control efficiency, residual exposure, remediation progress, and risk-reduction outcomes.
• Modernizing identity controls through automation, continuous monitoring, lifecycle reconciliation, access-review workflows, evidence collection, and appropriately governed automated remediation.
• Expanding governance for non-human identities, including service accounts, workloads, applications, automation, bots, and AI agents, by establishing accountable ownership, lifecycle controls, credential safeguards, periodic certification, and least-privilege access.
• Developing governance talent and crafting the perspectives of senior leaders across business, engineering, operations, security, risk, compliance, audit, and Human Resources to resolve opposing priorities, strengthen accountability, and drive balanced enterprise-wide results.

We want you to have:

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent experience; Master’s degree preferred.
• 10+ years of dynamic experience in cybersecurity, identity and access management, or technology risk, including significant IAM/PAM governance experience within a large, complex enterprise.
• 5+ years of leadership experience managing teams, enterprise programs, or cross-functional identity or security initiatives, with demonstrated success developing talent and influencing senior leaders.
• Deep knowledge of IAM/PAM governance practices, including identity lifecycle management, access certification, least privilege, segregation of duties, role engineering, privileged-account coverage, just-in-time access, credential and secrets management, session oversight, and non-human identity risk.
• Working knowledge of identity technologies such as SailPoint, Saviynt, CyberArk, BeyondTrust, Delinea, Microsoft Entra ID, and Okta, with the technical judgment to challenge evidence and influence engineering teams without directly administering the platforms.
• Solid understanding of applicable frameworks and standards, including NIST CSF, NIST SP 800-53, NIST SP 800-63 Digital Identity Guidelines, NIST SP 800-207 Zero Trust Architecture, CIS Controls, ISO 27001, and SOX/ITGC access-control expectations.
• Demonstrated experience leading identity-governance transformation, automation, continuous monitoring, audit readiness, systemic remediation, exception governance, and risk-based investment planning; experience with non-human identity, secrets-management, or AI-agent access governance preferred.
• CISSP, CISM, CISA, or equivalent professional certification required; identity-focused credentials such as IDPro CIDPRO, CIAM, SailPoint, CyberArk, or Microsoft identity certifications preferred.