Cloud IAM Governance Lead (GCP)

Heitmeyer Consulting; Brooklyn (OH); On-site; USD 140,000 - 180,000; Full time

Job summary

Heitmeyer Consulting is seeking a Cloud IAM Governance Lead for a prominent banking client to establish and mature governance standards for identity and access management within Google Cloud Platform.

This role partners with Privileged Access Management and Service Account Governance to create a cohesive cloud identity governance strategy, translating policy into practical controls across cloud environments.

Qualifications

• Strong GCP engineering background with hands-on cloud IAM experience.
• Experience with IAM governance in a large, highly regulated environment.
• Experience with:
• CyberArk (HPAM), including privileged access and service account governance.
• SailPoint IIQ, including human and non-human identity governance.
• ServiceNow for workflow, inventory management, and reporting.
• Strong understanding of governance, risk, controls, and audit requirements.
• Ability to translate policy and regulatory requirements into practical controls and governance standards.

Responsibilities

• Define and oversee governance standards for cloud identities, privileged access, and service accounts.
• Establish cloud IAM guardrails covering roles, permissions, entitlements, federation, and access controls.
• Ensure least-privilege access and separation-of-duties principles are consistently applied across cloud environments.
• Serve as the escalation point for cloud IAM governance issues, risk decisions, and design exceptions.
• Partner with IAM Engineering, Cloud Platform teams, Risk, Audit, and Application Owners to implement and maintain governance controls.
• Translate regulatory and policy requirements into operational IAM standards and controls.

Skills

GCP engineering

IAM governance

CyberArk HPAM

SailPoint IIQ

ServiceNow

Identity governance

Tools

CyberArk HPAM

SailPoint IIQ

ServiceNow

Job description

Job Summary:

Our banking client is seeking a Cloud IAM Governance Lead to establish and mature governance standards for identity and access management within Google Cloud Platform (GCP). This individual will partner closely with the leaders responsible for Privileged Access Management (CyberArk/HPAM) and Service Account Governance to create a cohesive cloud identity governance strategy.

The ideal candidate brings a strong GCP engineering background combined with IAM governance experience and understands the complexities of cloud identity management, including dynamic identities, changing entitlements, and evolving cloud environments.

Key Responsibilities

• Define and oversee governance standards for cloud identities, privileged access, and service accounts.
• Establish cloud IAM guardrails covering roles, permissions, entitlements, federation, and access controls.
• Ensure least-privilege access and separation-of-duties principles are consistently applied across cloud environments.
• Serve as the escalation point for cloud IAM governance issues, risk decisions, and design exceptions.
• Partner with IAM Engineering, Cloud Platform teams, Risk, Audit, and Application Owners to implement and maintain governance controls.
• Translate regulatory and policy requirements into operational IAM standards and controls.

First 90 Days

• Learn the bank’scloud and IAM environment and build relationships with key stakeholders.
• Collaborate with the HPAM and Service Account Governance Leads to assess current-state governance.
• Develop and begin implementing enterprise cloud IAM governance standards and updates to existing identity governance frameworks.

Required Qualifications

• Strong GCP engineering background with hands-on cloud IAM experience.
• Experience with IAM governance in a large, highly regulated environment.
• Experience with:
  • CyberArk (HPAM), including privileged access and service account governance.
  • SailPoint IIQ, including human and non-human identity governance.
  • ServiceNow for workflow, inventory management, and reporting.
• Strong understanding of governance, risk, controls, and audit requirements.
• Ability to translate policy and regulatory requirements into practical controls and governance standards.

Preferred Qualifications

• Banking or Financial Services experience.
• Security or audit certifications such as CISSP or CISA.