Enterprise Privileged Access Leader & PAM Architect

Point72 Asset Management, L.P; New York (NY); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health care

Parental leave

Wellness programs

Volunteer opportunities

Matching gifts

Affinity groups

Tuition assistance

401(k)

Job summary

Point72’s Technology team is seeking a senior security professional to lead and mature our privileged access management program in New York. You will partner with infrastructure, security, cloud, and engineering teams to implement least-privilege controls, run certification campaigns, and drive governance across enterprise systems.

Candidates should have 8–10 years in information security with strong IAM, PAM, and compliance knowledge, and hands-on experience with CyberArk, SailPoint, and

Qualifications

• 8–10 years of experience in information security with a focus on identity and access management and privileged access management.
• Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent practical experience.
• Strong knowledge of privileged account lifecycle management, credential vaulting, privileged session management, least privilege, privileged elevation, and secrets management.
• Hands-on experience with privileged access management solutions, such as CyberArk, BeyondTrust, Delinea, Microsoft Entra PIM, or similar technologies.
• Experience with identity governance and administration platforms, such as SailPoint Identity Security Cloud, IdentityIQ, Saviynt, or similar technologies.
• Strong understanding of Active Directory, Microsoft Entra ID, Windows and Linux administration, enterprise authentication technologies, and authorization protocols (LDAP, Kerberos, SAML, OAuth, OpenID Connect, MFA).
• Knowledge of regulatory and security frameworks (SOX, ISO 27001, NIST, PCI DSS).
• Experience using data, dashboards, and AI tools to identify trends and validate outputs.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.
• Commitment to the highest ethical standards.

Responsibilities

• Lead the implementation, adoption, and continuous improvement of the enterprise privileged access management program.
• Develop and maintain privileged access policies, standards, governance processes, and operating procedures.
• Partner with infrastructure, security, cloud, application, and engineering teams to onboard applications and accounts into the platform.
• Apply least privilege, segregation of duties, and risk-based access principles across workflows and remediation efforts.
• Lead privileged access certification campaigns and audit responses by validating access rights and remediating findings.
• Monitor operational health, security posture, and program effectiveness through dashboards and reports.
• Automate manual processes using scripting and APIs to reduce risk and improve efficiency.
• Use AI tools to accelerate analysis, streamline documentation, and support troubleshooting while validating outputs.
• Integrate privileged access controls with identity governance and other security processes across the enterprise.
• Mentor team members and evaluate emerging capabilities to mature the program.

Skills

IAM

Privileged Access

Compliance

Stakeholder mgmt

Automation

Education

Bachelor’s degree in CS/IS/Cybersecurity

Tools

CyberArk

BeyondTrust

Delinea

Microsoft Entra PIM

SailPoint Identity Security Cloud

Job description

Point72’s Technology team is seeking a senior security professional to lead and mature our privileged access management program in New York. You will partner with infrastructure, security, cloud, and engineering teams to implement least-privilege controls, run certification campaigns, and drive governance across enterprise systems.

Candidates should have 8–10 years in information security with strong IAM, PAM, and compliance knowledge, and hands-on experience with CyberArk, SailPoint, and