Associate Director, Access Management Service Delivery- Cybersecurity

Biogen; United States; On-site; USD 152,000 - 220,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with company match

Employee stock purchase plan

Tuition reimbursement

Paid time off

Job summary

Biogen is seeking an Associate Director, Access Management Service Delivery‑Cyber Security to lead global access management programs and drive automation across applications. You will set policies, oversee lifecycle management, and ensure auditability and reporting while aligning with regulatory requirements.

You will partner with Identity and other business units to deliver secure, scalable access services, manage a high-performing team, and influence strategic decisions within the Cyber

Qualifications

• 7+ years of focused Access Management experience including authorization, administration and auditing
• Proven ability to manage complex programs and projects with cross-functional stakeholders
• Strong leadership and collaboration skills across global teams

Responsibilities

• Establish access management policies and standards and drive automation initiatives
• Plan and execute service delivery improvements with measurable outcomes
• Coordinate with Identity to automate onboarding, lifecycle and deprovisioning of privileged accounts
• Manage stakeholder expectations and senior leadership communications

Skills

Access Management

Program management

Stakeholder management

Team leadership

Education

Bachelor’s Degree in a related field

Tools

IAM platforms

Job description

About This Role

As Biogen’s Associate Director, Access Management Service Delivery‑Cyber Security, you are the Access Management subject matter expert and services leader for all Access Management activities at Biogen. This role is accountable for delivering value to global stakeholders, which includes access services to every application in Biogen. A peer to this role is the Service Delivery Manager of Identity. This role reports directly to the Global Leader of Identity and Access Management and is a member of the extended leadership team within the Cybersecurity organization.

Responsibilities

As Associate Director, Access Management Service Delivery, you are responsible for establishing access management policies and standards and keeping them current. You are responsible for the planning and execution of initiatives that improve access management capabilities – both central platforms or efforts supporting independent stakeholder applications. This role is responsible for the entire service delivery process, from planning and implementing service strategies to monitoring and reporting on service performance. Long‑term, the largest lever to improve service delivery is through automation into target applications.

Currently, >95% of access transactions originate through our Biogen Access Management (BAM) platform, yet less than 25% are fulfilled through automation. In other words, 75% of requests require manual fulfillment by independent application teams. In the near‑term, this role will work with its peer in Identity to automate the onboarding, lifecycle and deprovisioning of all types of privileged accounts. A long‑term objective is to work with application owners across Biogen to adopt access automation.

This role manages the performance of an integrated team, ensuring that service delivery meets or exceeds stakeholder expectations. You will serve as the business process owner for access management policy, standards and processes which includes:

• Authorization (Permissions): Determining what an authenticated user is allowed to do. Common models include:
  • RBAC (Role-Based): Access granted based on job functions (e.g., 'HR Manager').
  • ABAC (Attribute-Based): Access based on dynamic factors such as location, time of day, or device security posture.
• Administration (Lifecycle Management): Managing the full lifespan of a digital identity, from provisioning (creation) and maintenance (role changes) to deprovisioning (deletion when a user leaves).
• Auditing & Reporting (Accountability): Tracking and recording user activities to maintain a clear audit trail.

What You’ll Do

Continuous measurement and planning

• Establish stakeholder credibility with thoughtful planning.
• Identify processes and/or manual transactions to improve and execute – largely through standards and automation.
• Prove results via metrics and stakeholder collaboration to prioritize opportunities with existing processes, service lines and technologies, building realistic and stakeholder‑driven project plans and enhancements.
• Plan to account for business/customer needs, user experience, and set up performing units/teams for success by sizing complexity and effort accurately.

Execution

• Own and drive forward projects, enhancements, and be responsible owner for addressing ad‑hoc operational issues.
• Manage:
  • Realistic timelines
  • Deliverables
  • Resource management
  • Change management
  • Stakeholder management

Stakeholder, Risk Management and Problem Solving

• Work cross‑functionally as the access management SME to support needs of stakeholder projects, enhancements and operational matters across the global IAM ecosystem.
• Anticipate and manage risks and ad‑hoc issues that arise with complex infrastructures.
• Command and control of major incidents impacting core service lines.

Policy and standards setting – Enforcing compliance

• Establish, review, and update policies, procedures, and standards.
• Define KPIs and measure compliance.
• Support regulatory requirements (e.g., SOX, GxP) and direct/indirect audits.

Who You Are

You are a seasoned leader with a passion for managing complex cybersecurity initiatives. Your strategic mindset enables you to navigate ambiguity and devise innovative solutions. You thrive in dynamic environments, leveraging strong interpersonal skills to engage with diverse stakeholders and drive impactful change. Your commitment to excellence and continuous improvement is evident in your ability to streamline processes and enhance service delivery. You are adept at fostering talent development, ensuring your team’s success and alignment with organizational goals.

Required Skills

• Bachelor’s Degree in a related field.
• At least 7 years of focused Access Management experience, including:
  • Authorization (Permissions)
  • Administration (Lifecycle Management)
  • Auditing & Reporting (Accountability)
• 10+ years of cybersecurity experience across domains is preferred.
• Proven success in managing complex programs and projects, including:
  • Demand Management
  • Project Management
  • Requirements Definition and Management
  • Software Design
  • Configuration Management
  • Integration and System Testing
• Strong track record of achieving customer success with business stakeholders beyond IT and Cyber domains.
• Track record of customer success with business stakeholders outside of the IT and Cyber organizations, with ability to implement lasting solutions and services to multiple stakeholders.
• Demonstrated success in talent development and management.

Preferred Skills

• Experience with automation and process improvement in an IAM context, especially access management.
• Familiarity with regulatory compliance standards such as SOX and GxP, including:
  • Risk Management
  • Quality Management

Job Level: Management

Additional Information

The base compensation range for this role is $152,000.00 – $220,000.00. Base salary is determined through an analytical approach that considers relevant skills & experience, job location, and internal equity. Regular employees are eligible to receive short‑term and long‑term incentives, including cash bonus and equity incentive opportunities, designed to reward recent achievements and future potential based on individual, business unit, and company performance.

Benefits

• Medical, Dental, Vision, & Life insurances
• Fitness & Wellness programs including a fitness reimbursement
• Short‑ and Long‑Term Disability insurance
• Minimum 15 days of paid vacation and additional end‑of‑year shutdown time off (Dec 26‑Dec 31)
• Up to 12 company paid holidays + 3 paid days off for Personal Significance
• 80 hours of sick time per calendar year
• Paid Maternity and Parental Leave benefit
• 401(k) program participation with company matched contributions
• Employee stock purchase plan
• Tuition reimbursement of up to $10,000 per calendar year
• Employee Resource Groups participation

Why Biogen?

We are a global team with a commitment to excellence, and a pioneering spirit. As a mid‑sized biotechnology company, we provide the stability and resources of a well‑established business while fostering an environment where individual contributions make a significant impact. Our team encompasses some of the most talented and passionate achievers who have unparalleled opportunities for learning, growth, and expanding their skills. Above all, we work together to deliver life‑changing medicines, with every role playing a vital part in our mission. Caring Deeply. Achieving Excellence. Changing Lives.

At Biogen, we are committed to building on our culture of inclusion and belonging that reflects the communities where we operate and the patients we serve. We know that diverse backgrounds, cultures, and perspectives make us a stronger and more innovative company, and we are focused on building teams where every employee feels empowered and inspired. Read on to learn more about Biogen.

All qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, marital status, race, color, national origin, ancestry, ethnicity, religion, age, veteran status, disability, genetic information or any other basis protected by federal, state or local law. Biogen is an E‑Verify Employer in the United States.