Director, Identity Governance and Workforce Protection

US6469 Sysco Payroll, Division of Sysco Resources Services, LLC; Houston (TX); On-site; USD 180,000 - 260,000; Full time

Job summary

Sysco Corp. is seeking a Director to lead Identity Governance and Workforce Protection in Houston.

You will define long-term security roadmaps, provide technical guidance, and manage multiple teams responsible for identity governance, lifecycle management, and access protection. You will drive enterprise-wide identity strategies, ensure compliance with security standards, and coordinate with vendors through security initiatives and integrations.

Qualifications

• 10+ years in cybersecurity or information risk management with IAM and identity governance expertise.
• Leadership experience overseeing multiple security teams and enterprise services.
• Familiarity with SailPoint, Entra ID, CA, and workforce identity protection concepts.

Responsibilities

• Lead development and evolution of security strategy for enterprise identity and workforce access.
• Provide technical leadership and design guidance across teams; define roadmaps for identity security.
• Oversee SailPoint, Entra ID, CA, and ServiceNow integrations; ensure compliance and risk controls.
• Mentor ~20 FTEs across Identity Governance, Lifecycle Management, and Workforce Protection.
• Drive cross-functional roadmaps and vendor collaboration, including M&A security considerations.

Skills

Identity & Access Management

Identity Governance

SailPoint

Microsoft Entra ID

Conditional Access

Workforce Identity Protection

Education

Bachelor's degree or above in CS/Cybersecurity/IT

Tools

SailPoint

Microsoft Entra ID

ServiceNow

Job description

Job Summary:

The Director, Identity Governance and Workforce Protection is responsible for the development and evolution of security strategy, both as it relates to the company's enterprise identity needs and to workforce access and protection services. As a subject matter expert, the Director will be expected to provide technical leadership and design guidance across the organization, define long-term roadmaps for identity security processes and technology, and ensure compliance with security and data protection requirements. The role leads approximately 20 FTEs across multiple teams responsible for identity governance, identity lifecycle management, security administration, and workforce identity protection.

Duties and Responsibilities:

• Oversee identity security and workforce protection solutions and ensure they align with business requirements, compliance mandates, and security policies.
• Approve and lead implementation of identity security technologies and processes. This may include interacting with vendor representatives and participating in security consultation during M&A activity.
• Maintain the identity security posture of the organization through regular review and refresh of technology and infrastructure. Ensure new solutions align with business requirements, compliance mandates, and security policies.
• Provide technical supervision and guidance to teams responsible for Identity Governance, Identity Lifecycle Management, Security Administration, and Workforce Identity Protection, including reviewing significant architecture and control changes to ensure they adhere to security requirements.
• Serve as the security subject matter expert in delivering hands‑on identity security expertise in support of the environment, including identity governance, Joiner-Mover-Leaver processes, access lifecycle automation, and workforce access support.
• Serve as the security subject matter expert in utilizing current Cybersecurity technology disciplines and industry standards to ensure confidentiality, integrity, and availability of information assets, with particular focus on workforce identity and access controls.
• Define and maintain technical requirements to facilitate the implementation of policies, standards, procedures, and identity security controls.
• Provide strategic and technical oversight for key identity platforms and services, including SailPoint for identity governance and lifecycle management, Microsoft Entra ID and Conditional Access for workforce identity protection, and ServiceNow integrations supporting identity service intake and workflows.
• Drive cross‑functional roadmaps and stakeholder alignment for major identity initiatives, including application onboarding and automation, ServiceNow/SailPoint integration, and future migration of SailPoint capabilities to the SaaS platform.
• Ensure operational services are effective and responsive, including workforce access support activities such as access‑right changes, distribution list administration, and other identity‑related requests.

Education Preferred:

• Education (Bachelor’s Degree or above) related to Computer Science, Cybersecurity, Information Technology, or related fields

Experience Required:

• 10+ years of experience in Cybersecurity and/or information risk management, with strong working knowledge of identity and access management, identity governance, and security technologies.
• Demonstrated leadership experience managing multiple technical or security teams and delivering enterprise‑scale security services.
• Strong working knowledge of Identity and Access Management (IAM) concepts, identity governance, access lifecycle management, and workforce identity protection.
• Experience with SailPoint or comparable Identity Governance and Administration (IGA) platforms; SailPoint experience strongly preferred.
• Experience with Microsoft Entra ID (Azure AD), Conditional Access, authentication, and workforce identity security controls.
• Understanding of security design principles and architecture‑level concepts.
• Experience formulating and prioritizing security requirements according to the organization's risk appetite.
• Understanding of relevant frameworks including NIST, ITIL, or ISO 27001/27002.
• Experience with enterprise integrations and workflow automation; ServiceNow integration experience is preferred.

Licenses/Certifications Preferred:

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP), or other relevant identity/security certifications.

Skills and Abilities:

• Strong working knowledge of Identity and Access Management, Identity Governance, and Security Technologies.
• Strong knowledge of SailPoint, Microsoft Entra ID, Conditional Access, identity lifecycle processes, and enterprise access governance.
• Understanding of security design principles and architecture‑level concepts.
• Experience formulating and prioritizing security requirements according to the organization's risk appetite.
• Understanding of relevant frameworks including NIST, ITIL, or ISO 27001/27002.
• Strong stakeholder management and communication skills, with the ability to align business, security, infrastructure, and application teams around identity initiatives.
• Ability to lead both operational service delivery and engineering/automation roadmaps across multiple identity security teams.

Physical Demands:

• Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job.