IAM Access Governance Lead — Certification & RBAC

TIAA; Iselin (PA); On-site; USD 108,000 - 130,000; Full time

Job summary

TIAA is seeking a Lead Information Security Operations Specialist to own the IAM Access Certification program and enforce least privilege across applications and platforms. You will drive certification campaigns, SoD controls, and RBAC frameworks, partnering with application teams and enterprise IAM leadership.

You will guide migration from SailPoint IdentityIQ to Saviynt, extend governance to decentralized apps, and explore AI-enabled capabilities to improve efficiency and accuracy of reviews.

Qualifications

• 5+ years IT or information security experience.
• 3+ years Identity Governance and Administration (IGA) program experience.
• Hands-on Saviynt and/or SailPoint IdentityIQ experience.
• Experience implementing SoD rules and RBAC frameworks.
• Strong understanding of least privilege in enterprise access governance.
• Experience partnering with cross-functional teams to translate requirements.

Responsibilities

• Lead end-to-end IAM Access Certification program strategy and execution.
• Define onboarding eligibility and integration types for centralized IGA platform.
• Develop and maintain SoD rules and RBAC profiles with application teams.
• Lead user access review campaigns enforcing least privilege.
• Migration/support SailPoint IdentityIQ to Saviynt; validate configurations.
• Collaborate with internal audit to strengthen controls.
• Identify opportunities to leverage AI-enabled capabilities for reviews.

Skills

IGA program leadership

Saviynt / SailPoint

RBAC & SoD

Least privilege

Cross-functional collab

AI-assisted reviews

Education

Bachelor's degree in infosec / related

Tools

Saviynt

SailPoint IdentityIQ

Job description

TIAA is seeking a Lead Information Security Operations Specialist to own the IAM Access Certification program and enforce least privilege across applications and platforms. You will drive certification campaigns, SoD controls, and RBAC frameworks, partnering with application teams and enterprise IAM leadership.

You will guide migration from SailPoint IdentityIQ to Saviynt, extend governance to decentralized apps, and explore AI-enabled capabilities to improve efficiency and accuracy of reviews.