Lead Identity Governance & Access Security

University of Central Florida - College of Medicine; Orlando, Northern (FL, KY); Hybrid; USD 105,000 - 125,000; Full time

Benefits offered by this job

Medical benefits

Paid time off

Retirement savings options

Employee discounts

Education assistance

Job summary

University of Central Florida - College of Medicine seeks an Information Security Professional IV, Lead to head the Identity Governance and Access Management function. You will oversee identity lifecycle, RBAC, privileged access, and enterprise-wide security improvements on-site in Orlando.

Lead a team, drive governance initiatives, ensure audit readiness, and collaborate with ERP security and enterprise applications teams to reduce risk and enforce compliant access controls.

Qualifications

• Bachelor’s degree and 5 years of relevant experience; or High School Diploma (or equivalent) and 9 years of relevant work experience in lieu of degree or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).
• Experience leading Identity Governance and Access Management (IGA) programs in a large, complex organization.
• Experience with identity lifecycle management, role-based access control, and access review processes.
• Knowledge of privileged access management (PAM), identity governance, and authorization frameworks.
• Experience supporting ERP and enterprise application security.
• Familiarity with security governance, compliance, risk management, and audit activities.
• Experience supervising or leading technical security teams.
• Strong analytical, communication, and stakeholder engagement skills.

Responsibilities

• Lead the design, governance, and continuous improvement of identity governance and access management services.
• Oversee access request processes, RBAC, entitlement management, authorization standards, and access review programs.
• Ensure identity-related controls support security, compliance, and operational objectives.
• Provide day-to-day leadership for the Identity Governance and Access Management team.
• Assign and prioritize work, review deliverables, coach and mentor staff, and support professional development.
• Ensure consistent, high-quality service delivery and operational coverage.
• Serve as the senior technical lead for identity lifecycle processes, including joiner/mover/leaver/workflows.
• Provide direction for provisioning, de-provisioning, affiliation management, and access control enhancements.
• Promote secure, timely, and appropriate access across university systems.
• Provide governance and oversight for privileged accounts, service accounts, machine identities, service principals, and administrative access.
• Establish standards, review exceptions, and support audit readiness activities.
• Ensure high-risk access is appropriately approved, documented, monitored, and reviewed.
• Lead security design decisions related to identity and access management controls.
• Evaluate control gaps and recommend solutions that strengthen security and reduce risk.
• Align identity governance practices with institutional policies, compliance requirements, and audit expectations.
• Provide oversight for access models and authorization controls supporting ERP and other enterprise applications.
• Partner with business units, security teams, and technical stakeholders to improve access governance and application security.
• Help reduce over-provisioning and under-provisioning while supporting business needs.
• Lead reporting and analytical efforts related to identities, roles, entitlements, privileged access, and access review outcomes.
• Support internal audits, compliance reviews, and external assessments through the development of reports and evidence packages.

Skills

Identity Governance

Access Management

Leadership

RBAC

Audits

Education

Bachelor’s degree

High School Diploma

Tools

PAM

ERP Security

Job description

University of Central Florida - College of Medicine seeks an Information Security Professional IV, Lead to head the Identity Governance and Access Management function. You will oversee identity lifecycle, RBAC, privileged access, and enterprise-wide security improvements on-site in Orlando.

Lead a team, drive governance initiatives, ensure audit readiness, and collaborate with ERP security and enterprise applications teams to reduce risk and enforce compliant access controls.