Identity & Access Security Transformation Lead

Brown Brothers Harriman & Co.; Jersey City (NJ); On-site; USD 200,000 - 260,000; Full time

Job summary

Brown Brothers Harriman (BBH) seeks an experienced Head of Information Security / Identity and Access Management to lead the enterprise IAM program within the Protect Pillar. You will oversee authentication, authorization, privileged access, governance, and modern Zero Trust practices in a highly regulated financial services setting.

The role requires deep technical and executive leadership, driving automation, scalable processes, and an emphasis on user experience while maintaining compliance

Qualifications

• 15+ years of information security experience including leadership of IAM programs.
• Deep expertise in IAM, privileged access management, authentication technologies, authorization models and identity governance.
• Familiarity with MFA, FIDO2, Microsoft Entra ID, AD, Sailpoint, Ping, and Zero Trust principles.
• Experience leading enterprise IAM modernization and security control enhancements.

Responsibilities

• Define and execute the enterprise IAM strategy aligned with business objectives and regulatory requirements.
• Develop a multi-year vision to mature identity security, authentication, authorization, and governance.
• Lead modernization of identity governance processes and workflows.
• Coordinate responses to internal audit, SOC1/SOC2 exams, and regulatory reviews.
• Partner with stakeholders to redesign legacy processes and implement scalable solutions.

Skills

Identity & Access Management

Privileged Access Management

Authentication technologies

Authorization models

Identity governance

Lifecycle management

Cloud identity

Hybrid identity

MFA / modern authentication

SailPoint

PowerPoint

Excel

Tools

SailPoint

One Identity Safeguard (OIS)

Mainframe security (z/OS & RACF)

Job description

Brown Brothers Harriman (BBH) seeks an experienced Head of Information Security / Identity and Access Management to lead the enterprise IAM program within the Protect Pillar. You will oversee authentication, authorization, privileged access, governance, and modern Zero Trust practices in a highly regulated financial services setting.

The role requires deep technical and executive leadership, driving automation, scalable processes, and an emphasis on user experience while maintaining compliance