VP, IAM Assurance Leader (L13)

Synchrony Financial; Hyderabad; On-site; INR 9,000,000 - 15,000,000; Full time

Job summary

Synchrony Financial seeks a VP IAM Assurance Leader to drive the Identity and Access Management assurance program across centralized and distributed services. The role partners with IAM product owners and engineering to meet regulatory requirements while ensuring operational delivery and automation of control remediation.

The ideal candidate will bring deep IAM controls expertise, hands-on experience with AD/LDAP, Beyond Identity, and related IAM services, and a track record of leading

Qualifications

• 10+ years IT experience or 12+ years with equivalent growth
• 5+ years leading IAM service products across centralized and distributed models
• 3+ years leading operations or assurance teams with monitoring and remediation
• 2+ years working with Agile methodologies in leadership roles
• 2+ years of people management experience (2+ engineers)
• Strong understanding of IAM directory services and authentication platforms
• Experience with assurance reporting dashboards and metrics platforms
• Hands-on experience with security control design and assurance operations
• Experience with Unix/Linux Server Access Administration
• Familiarity with ServiceNow, SailPoint IdentityIQ, privileged access tooling, RSA Authentication Manager
• Excellent written and verbal communication for executive reporting
• Ability to develop long-term program visions and roadmaps
• Strong organizational and prioritization skills
• Proactive problem solver in complex environments

Responsibilities

• Develop and execute multi-year IAM assurance roadmaps
• Engage stakeholders across security, governance, risk and internal audit
• Identify, assess and mitigate technical and organizational risks
• Lead design of automated IAM control remediation
• Maintain audit-ready standards, policies and procedures
• Define KRIs and KPIs to measure program maturity
• Lead assurance activities for centralized and decentralized IAM services
• Own IAM assurance reporting platform, ensure accuracy and audit-readiness
• Collaborate with IAM product owners using Agile
• Produce high-quality evidence for SOX/PCI audits
• Create and maintain operational documentation and end-user materials
• Resolve technical challenges and escalate when needed

Skills

IAM leadership

Strategic roadmaps

Stakeholder management

Agile methods

Communication skills

Risk management

Automation understanding

Unix/Linux

Education

Bachelor's degree in CS/IT/Cybersecurity or equivalent

Tools

ServiceNow

SailPoint IdentityIQ

Beyond Identity / Bomgar

Active Directory

Job description

Company Overview

Synchrony (NYSE: SYF) is a premier consumer financial services company delivering one of the industry’s most complete digitally enabled product suites. Our experience, expertise and scale encompass a broad spectrum of industries including digital, health and wellness, retail, telecommunications, home, auto, outdoors, pet and more. We have recently been ranked #2 among India’s Best Companies to Work for by Great Place to Work. We were among the Top 50 India’s Best Workplaces in Building a Culture of Innovation by All by GPTW and Top 25 among Best Workplaces in BFSI by GPTW. We have also been recognized by AmbitionBox Employee Choice Awards among the Top 20 Mid‑Sized Companies, ranked #3 among Top Rated Companies for Women, and Top‑Rated Financial Services Companies. We provide best‑in‑class employee benefits and programs that cater to work‑life integration and overall well‑being. We provide career advancement and upskilling opportunities for all to take up leadership roles.

Organizational Overview

The Identity and Access Management (IAM) team at Synchrony oversees key security functions including authentication, authorization, privileged access management, special programs, and federated controls governance. This team ensures comprehensive management of identity and access processes to maintain robust security and compliance across the organization.

Role Summary/Purpose

We are seeking an innovative and results‑driven leader to serve as VP, IAM Assurance Leader, responsible for leading the IAM Services Assurance function overseeing key controls across all centralized and decentralized IAM services. This role will work closely with IAM product owners and engineering teams to ensure adherence to Synchrony IAM standards and regulatory requirements without disrupting operational delivery. The ideal candidate will possess deep technical expertise and hands‑on experience across IAM controls, assurance operations, and identity/authentication platforms (e.g., Active Directory, LDAP technologies, Beyond Identity, and related IAM services). As a strategic leader, you will guide teams, enable cross‑functional collaboration, and drive continuous improvement in the effectiveness, reporting, and automation of IAM controls—particularly in critical areas such as logical access, authentication assurance, privileged access oversight, and control evidence for SOX/PCI and other regulatory obligations. You will blend technology insight with program management discipline to ensure success in execution and delivery, including the creation and modernization of assurance reporting capabilities and the automation of control remediation where appropriate.

Essential Responsibilities

• Create and Maintain Strategic Roadmaps: Develop and execute multi‑year roadmaps to drive innovation, strengthen security posture, meet regulatory requirements, and streamline IAM operations—specifically for IAM assurance capabilities, control monitoring, and evidence automation.
• Stakeholder Engagement: Build and nurture strong relationships across Security Operations, Technology Teams, Governance, Operational Risk, and Internal Audit, ensuring program alignment, audit readiness, and the ability to clearly demonstrate IAM control effectiveness to stakeholders and regulators.
• Risk and Progress Management: Identify, assess, and mitigate technical and organizational risks while regularly reporting blockers, corrective actions, and program milestones to executive leadership; ensure timely remediation of control gaps and recurring defects.
• Solution Design & Automation: Lead and contribute to designing technical solutions for complex automation use cases, driving operational efficiency and scalability—especially automation to detect, track, and remediate IAM control defects.
• Program Integrity: Ensure standards, policies, and procedures are accurately documented and officially maintained for audit and compliance requirements; recommend updates to IAM standards based on security threats, regulatory expectations, and industry trends.
• Performance Tracking: Define, implement, and monitor Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) to measure program maturity and overall effectiveness, including assurance coverage, control pass rates, remediation SLAs, defect recurrence, and reporting timeliness/accuracy.
• Assurance Operations Leadership: Lead assurance activities to track, validate, and remediate key logical access and authentication controls across centralized IAM services (e.g., Active Directory, Oracle LDAP, Beyond Identity) and decentralized implementations as applicable.
• Assurance Reporting Platform Ownership: Manage and evolve the IAM assurance reporting platform(s) used to monitor adherence to Synchrony standards, control design, and operational effectiveness; ensure reporting is accurate, resilient, and audit‑ready.
• Agile Partnership with Product Owners: Partner with IAM product owners and delivery teams using Agile methodologies to prioritize and implement control improvements, balancing risk reduction with service stability and customer impact.
• Control Evidence & Audit Support: Ensure the organization can efficiently produce high‑quality evidence for SOX, PCI, and other examinations; proactively address audit issues with root‑cause correction and sustainable control improvements.
• Documentation & Enablement: Oversee creation, maintenance, and review of operational process documentation and end‑user/training materials needed to support consistent execution of IAM assurance activities.
• Problem Resolution: Independently resolve technical challenges while escalating issues with clarity when necessary.
• Perform other critical duties or special projects as assigned.

Qualifications/Requirements

• BS/BA in Computer Science, Information Technology, Cybersecurity, Business Management, or equivalent, plus 10+ years IT experience, OR in lieu of a degree with 12+ years IT experience demonstrating progressive responsibility.
• Minimum 5 years of experience leading multiple IAM service products (e.g., authentication, privileged access, identity governance) and driving outcomes across both centralized and distributed service models.
• Minimum 5 years of experience developing and improving IAM service processes and reporting on IAM service key controls (design and operating effectiveness).
• Minimum 3 years leading operations or assurance teams, including continuous monitoring, issue management, and control remediation.
• At least 2 years working with Agile methodologies in roles such as Product Owner, Scrum Master, or Technical Lead.
• Minimum 2 years of people management experience, leading teams of 2+ engineers or contractors.
• Strong understanding of IAM directory services, such as Active Directory, LDAP, Oracle LDAP, or similar.
• Experience with assurance reporting, control monitoring dashboards, and/or metrics platforms used to track compliance and remediation status.
• Hands‑on experience with Security Control Design and Security Assurance Operations, including defining controls, validating operating effectiveness, and driving remediation.
• Hands‑on experience with Unix/Linux Server Access Administration and access security.
• Experience supporting or integrating IAM platforms and processes such as ServiceNow, SailPoint IdentityIQ, privileged access tooling (e.g., Bomgar/BeyondTrust), and authentication technologies (e.g., RSA Authentication Manager or equivalents).
• Exceptional written and verbal communication skills for effective cross‑team collaboration and executive reporting, including the ability to translate technical risk into business impact.
• Strategic thinker able to develop and articulate long‑term program visions and actionable roadmaps.
• Strong organizational and prioritization skills, capable of managing multiple concurrent projects in complex environments.
• Proactive problem solver with the ability to navigate ambiguity and escrow appropriately.
• Strong analytical and clear‑thinking skills; ability to interpret control results, identify root causes, and drive durable corrective actions.
• Customer‑oriented mindset and ability to reduce friction for product teams while improving assurance outcomes.

Desired Characteristics

• Proven experience leading large‑scale IAM initiatives, including program design, execution, and cross‑functional collaboration in complex technical environments.
• Exceptional communication and organizational skills, with a track record of creating and executing long‑term strategic roadmaps.
• Strong ability to manage risk and complexity, navigate roadblocks, and driver corrective actions effectively.
• Demonstrated ability to lead, mentor, and manage teams while building partnerships across business units and fostering alignment to organizational goals.
• Strong commitment to providing outstanding customer experiences; ability to balance control compliance with minimal operational disruption.
• Self‑starter with a strong sense of urgency and flexibility to change directions quickly while maintaining delivery discipline.
• Experience with the process of creating, maintaining and reviewing operations process & end user training documentation.
• Working knowledge of ServiceNow, SailPoint IdentityIQ, Active Directory, Bomgar/BeyondTrust privileged access, Unix LDAP, and RSA Authentication Manager (or comparable tools).
• Experience working in highly regulated industries (Finance, Healthcare, Government), particularly enterprise‑level security in a financial institution.
• Familiarity with compliance standards such as SOX, PCI, FFIEC, GDPR, HIPAA, or NIST cybersecurity frameworks, including NIST 800‑63 and logical access control expectations.
• Certifications such as CISSP, CISM, PMP, or relevant IAM‑focused certifications.

Eligibility Criteria

BS/BA in Computer Science, Information Technology, Cybersecurity, Business Management, or equivalent, plus 10+ years IT experience, OR in lieu of a degree with 12+ years IT experience demonstrating progressive responsibility.

Business Hours

Role requires collaboration during India and US business hour overlap windows to support leadership and stakeholder discussions.

Work Timings

9AM - 5PM EST