Head of IAM & Identity Security - Strategy Lead

Brown Brothers Harriman; Jersey City (NJ); On-site; USD 200,000 - 260,000; Full time

Job summary

Brown Brothers Harriman (BBH) is seeking a Head of Information Security / Identity and Access Management in Jersey City. This role leads the enterprise ISM team and drives the modernization of identity governance, authentication, authorization, and privileged access capabilities.

The ideal candidate will bring 15+ years in information security with strong IAM leadership, experience with SailPoint and mainframe security, and a track record of influencing executives and delivering scalable

Qualifications

• Minimum 15 years of information security experience with IAM leadership.
• Deep expertise in IAM, privileged access management, authentication and authorization models.
• Experience with identity governance, lifecycle management, and cloud/hybrid identity architectures.
• Strong knowledge of MFA, modern authentication standards (FIDO2), and related technologies.

Responsibilities

• Define and execute an enterprise IAM strategy aligned with business objectives and regulatory requirements.
• Develop a multi-year roadmap to mature identity security, authentication, authorization, and governance capabilities.
• Lead enhancements in identity lifecycle management, privileged access, and governance processes.
• Oversee auditing, attestations, access reviews, and escalation workflows across cloud and on-prem environments.
• Partner with stakeholders to modernize legacy processes and implement scalable identity solutions.

Skills

Identity & Access Management

IAM leadership

Privileged Access Management

Authentication technologies

Authorization models

Identity governance

Cloud/hybrid identity

MFA / modern authentication

Microsoft Entra ID / AD

Zero Trust

Just-in-Time access

Just-Enough-Access

Least privilege

NIST/ISO/FFIEC standards

Tools

SailPoint

One Identity Safeguard

Mainframe z/OS

RACF

Job description

Brown Brothers Harriman (BBH) is seeking a Head of Information Security / Identity and Access Management in Jersey City. This role leads the enterprise ISM team and drives the modernization of identity governance, authentication, authorization, and privileged access capabilities.

The ideal candidate will bring 15+ years in information security with strong IAM leadership, experience with SailPoint and mainframe security, and a track record of influencing executives and delivering scalable