Information Security Professional IV, Lead

ucf; Orlando (FL); On-site; USD 105,000 - 125,000; Full time

Job summary

The University Operations division at UCF is seeking an Information Security Professional IV, Lead to serve as the technical and operational leader for the Identity Governance and Access Management (IGA) function within UCF's Information Security Office.

This role leads identity security operations, manages a security team, and drives enterprise‑wide initiatives to govern access to university systems, applications, and data, ensuring secure, compliant access based on roles and affiliations.

Qualifications

• Bachelor's degree with 5+ years of relevant experience or HS diploma with 9+ years in lieu of a degree.
• Experience leading Identity Governance and Access Management programs is preferred.
• Knowledge of RBAC, access reviews, PAM and enterprise applications security is desirable.

Responsibilities

• Lead design, governance and continuous improvement of identity governance and access management services.
• Oversee access request, RBAC, entitlement management and review programs.
• Provide day-to-day leadership for the IAM team and ensure high-quality service delivery.
• Direct identity lifecycle processes including joiner/mover/leaver workflows and provisioning.
• Govern privileged accounts, service accounts, and administrative access with oversight.
• Guide security design decisions and align with policies, compliance and audits.
• Collaborate with business units and IT to improve application security and access governance.
• Lead reporting and audits related to identities, roles and entitlements.

Skills

Leadership

Identity governance

Access management

Team coaching

Education

Bachelor's degree + 5 years experience

HS diploma + 9 years experience

Job description

University Operations:

The University Operations division at UCF is committed to creating a supportive and welcoming environment for our faculty, staff, students, and the broader community. We take pride in delivering exceptional service, sharing our expertise, and upholding the highest standards to ensure a world‑class campus experience.

Visit our website or follow us on Facebook and Instagram to learn more.

The Opportunity:

University Operations is seeking to hire an Information Security Professional IV, Lead. This role serves as the technical and operational leader for the Identity Governance and Access Management (IGA) function within UCF's Information Security Office. This position oversees identity security operations, manages a team of security professionals, and leads enterprise‑wide initiatives that govern access to university systems, applications, and data. The role provides senior‑level leadership for identity lifecycle management, access governance, privileged access controls, compliance initiatives, and security improvements that reduce institutional risk while ensuring users receive appropriate access based on their roles and affiliations.

Responsibilities:

Identity Governance & Access Management Leadership

• Lead the design, governance, and continuous improvement of identity governance and access management services.
• Oversee access request processes, role‑based access control (RBAC), entitlement management, authorization standards, and access review programs.
• Ensure identity‑related controls support security, compliance, and operational objectives.

Team Leadership & Operations

• Provide day‑to‑day leadership for the Identity Governance and Access Management team.
• Assign and prioritize work, review deliverables, coach and mentor staff, and support professional development.
• Ensure consistent, high‑quality service delivery and operational coverage.

Identity Lifecycle & Access Control

• Serve as the senior technical lead for identity lifecycle processes, including joiner, mover, leaver, guest, affiliate, and sponsored account workflows.
• Provide direction for provisioning, de‑provisioning, affiliation management, and access control enhancements.
• Promote secure, timely, and appropriate access across university systems.

Privileged Access Governance

• Provide governance and oversight for privileged accounts, service accounts, machine identities, service principals, and administrative access.
• Establish standards, review exceptions, and support audit readiness activities.
• Ensure high‑risk access is appropriately approved, documented, monitored, and reviewed.

Security, Compliance & Risk Management

• Lead security design decisions related to identity and access management controls.
• Evaluate control gaps and recommend solutions that strengthen security and reduce risk.
• Align identity governance practices with institutional policies, compliance requirements, and audit expectations.

Enterprise Application Security

• Provide oversight for access models and authorization controls supporting ERP and other enterprise applications.
• Partner with business units, security teams, and technical stakeholders to improve access governance and application security.
• Help reduce over‑provisioning and under‑provisioning while supporting business needs.

Reporting, Audits & Continuous Improvement

• Lead reporting and analytical efforts related to identities, roles, entitlements, privileged access, and access review outcomes.
• Support internal audits, compliance reviews, and external assessments through the development of reports and evidence packages.
• Maintain policies, procedures, standards, and knowledge resources while driving continuous process improvement initiatives.

Minimum Qualifications:

• Bachelor's degree and 5 years of relevant experience; or High School Diploma (or equivalent) and 9 years of relevant work experience in lieu of degree or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).

Preferred Qualifications :

• Experience leading Identity Governance and Access Management (IGA) programs in a large, complex organization.
• Experience with identity lifecycle management, role‑based access control, and access review processes.
• Knowledge of privileged access management (PAM), identity governance, and authorization frameworks.
• Experience supporting ERP and enterprise application security.
• Familiarity with security governance, compliance, risk management, and audit activities.
• Experience supervising or leading technical security teams.
• Strong analytical, communication, and stakeholder engagement skills.

Special Instructions to the Applicants:

Position requires a valid Class E driver's license. This position may involve driving to various locations on and off campus to conduct University business.

• The anticipated salary range for this position is $104,664 - $125,000. The final salary will be determined based on the candidate's qualifications, experience, and internal equity considerations.

A