Head of Information Security / Identity and Access Management

Brown Brothers Harriman; Jersey City (NJ); On-site; USD 200,000 - 260,000; Full time

Job summary

Brown Brothers Harriman (BBH) is seeking a Head of Information Security / Identity and Access Management in Jersey City. This role leads the enterprise ISM team and drives the modernization of identity governance, authentication, authorization, and privileged access capabilities.

The ideal candidate will bring 15+ years in information security with strong IAM leadership, experience with SailPoint and mainframe security, and a track record of influencing executives and delivering scalable

Qualifications

• Minimum 15 years of information security experience with IAM leadership.
• Deep expertise in IAM, privileged access management, authentication and authorization models.
• Experience with identity governance, lifecycle management, and cloud/hybrid identity architectures.
• Strong knowledge of MFA, modern authentication standards (FIDO2), and related technologies.

Responsibilities

• Define and execute an enterprise IAM strategy aligned with business objectives and regulatory requirements.
• Develop a multi-year roadmap to mature identity security, authentication, authorization, and governance capabilities.
• Lead enhancements in identity lifecycle management, privileged access, and governance processes.
• Oversee auditing, attestations, access reviews, and escalation workflows across cloud and on-prem environments.
• Partner with stakeholders to modernize legacy processes and implement scalable identity solutions.

Skills

Identity & Access Management

IAM leadership

Privileged Access Management

Authentication technologies

Authorization models

Identity governance

Cloud/hybrid identity

MFA / modern authentication

Microsoft Entra ID / AD

Zero Trust

Just-in-Time access

Just-Enough-Access

Least privilege

NIST/ISO/FFIEC standards

Tools

SailPoint

One Identity Safeguard

Mainframe z/OS

RACF

Job description

At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what’s next, this is the right place to build a fulfilling career.

Head of Information Security / Identity and Access Management

The Head of Information Security / Identity and Access Management will serve as a strategic and technically deep leader responsible for the execution and continuous improvement of our enterprise-wide information Security Management (ISM) team within the Protect Pillar. This leader will be responsible for ensuring that identity is treated as a core security control and will oversee capabilities spanning authentication, authorization, privileged access management, identity governance, access certification, and modern Zero Trust principles.

Key Responsibilities

• Define and execute the enterprise Identity and Access Management strategy aligned with business objectives, security priorities, and regulatory requirements
• Establish and implement a multi-year vision and roadmap to further mature identity security, authentication, authorization, privileged access and identity governance capabilities
• Assess and lead enhancements relating to:
  • Identity lifecycle management
  • Authentication capabilities
  • Authorization and entitlement management
  • Privileged Access Management
  • Identity Governance and Administration
  • Role-based and attribute-based access controls
• Evaluate access protocols and ensure protocols are consistent with least privilege, just-in-time (JIT), just-enough (JEA) as appropriate to the level of access
• Ensure appropriate authorization controls and entitlement management across cloud, on-premise and non-human IDs
• Lead the modernization of identity governance processes. Identify opportunities to eliminate manual processes and improve the user experience while maintaining strong security and regulatory compliance
• Develop and implement a roadmap for modernizing identity governance and administration capabilities, with particular focus on lifecycle management, attestations, access reviews, and privileged access workflows
• Partner with technology and business stakeholders to redesign legacy processes and implement scalable solutions that support organizational growth and evolving security requirements
• Develop and execute a sustainable workforce strategy that attracts, develops and retains talent with skills needed to support a modern identity security program and evolving technologies
• Oversee and coordinate responses to Internal Audit, external audit / SOC1/SOC2 exams, regulatory reviews, client due diligence and other assurance activities relating to identity and access management

Qualifications

• Minimum 15 years of experience in information security, including leadership of identity and access management programs
• Deep expertise in:
  • Identity and Access Management
  • Privileged Access Management
  • Authentication technologies and protocols
  • Authorization models and entitlement management
  • Identity governance and lifecycle management
  • Cloud identity platforms and hybrid identity architectures
• Strong understanding of:
  • MFA, FIDO2 and modern authentication standards
  • Microsoft Entra ID, Active Directory, Sailpoint, Ping
  • Zero Trust security principles
  • Least privilege access models
  • Just-in-Time (JIT) access
  • Just-Enough-Access (JEA)
• Familiarity with DFS Part 500, NIST Cybersecurity Framework, ISO 27001/27002, FFIEC guidance and other relevant industry standards
• Experience leading enterprise-wide transformations involving IAM modernization and security control enhancements
• Demonstrated ability to influence executive stakeholders and drive organizational change
• Experience with SailPoint, One Identity Safeguard (OIS), mainframe system, mainframe security program (z/OS and RACF)
• Excellent analytical and communication skills
• Strong PowerPoint and Excel skills

Salary Range

$200,000-$260,000 base salary + annual target bonus

BBH and its affiliates' compensation program includes base salary, discretionary bonuses, and profit‑sharing. The anticipated base salary range(s) shown above are only for the indicated location(s) and may differ in other locations due to cost of living and labor considerations. Base salaries may vary based on factors such as skill, experience and qualification for the role. BBH's total rewards package recognizes your contributions with more than just a paycheck—providing you with benefits that enhance your experience at BBH from long‑term savings, healthcare, and income protection to professional development opportunities and time off, our programs support your overall well‑being.

We value diverse experiences.

We value diverse experiences and transferrable skillsets. If your career hasn’t followed a traditional path, includes alternative experiences, or doesn’t meet every qualification or skill listed in the job description, we appreciate your interest and encourage you to consider applying.

About BBH

Brown Brothers Harriman (BBH) is a premier global financial services firm, known for premium service, specialist expertise, technology solutions and partnership approach to client management. Across Investor Services and Capital Partners, we work with an enviable roster of sophisticated clients who make BBH their first call when they are tackling their hardest challenges. Delivering for our clients and each other energizes us.

We believe that how we do our work is just as important as what we do. We are relentless problem solvers who know our best ideas come from collective debate and development—so we are never possessive about our ideas. Every day we come together as a diverse community of smart and caring people to deliver exceptional service and expert advice—creating success that lasts. No matter where you sit in the organization, everyone is empowered to contribute their ideas. BBHers can pick up the phone and call any colleague, and they are happy to help. Expanding your impact beyond your daily role is part of how we operate as trusted partners to one another.

We believe stability is a competitive advantage, but being stable means having the knowledge, skill, and discipline to evolve, often—pushing the boundaries of innovation. As a private partnership, every investment we make is in the relationships, technologies, products and development we believe are in the long‑term interests of our clients and our people. Our long‑tenured leaders are experts in their areas and are actively involved in the day‑to‑day business, taking the time to provide guidance and mentoring to build the next generation of BBHers. Because we know, our success begins with yours.

Go to BBH.com to learn more about our rewards and benefits, philanthropy, approach to sustainability or how we support you to thrive personally, physically and financially.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, age, genetic information, creed, marital status, sexual orientation, gender identity, disability status, protected veteran status, or any other protected status under federal, state or local law.