Manager, Cybersecurity, Privileged Access Management - Remote

Stryker Corporation; Kalamazoo (MI); Hybrid; Confidential; Full time

Job summary

Stryker Corporation is seeking a Manager of Cybersecurity, Privileged Access Management to lead the enterprise PAM program from a remote location. You will own the PAM strategy, manage a team of analysts, and partner with Infrastructure, Cloud, and Audit teams to reduce privileged access risk across on-prem, cloud, and hybrid environments.

Ideal candidates have 8+ years in identity or cybersecurity, with 4+ years focusing on privileged access management and hands-on experience with CyberArk,

Qualifications

• Bachelor’s degree in a relevant field is required.
• 8+ years in identity or cybersecurity with 4+ years in PAM.
• Hands-on with CyberArk, BeyondTrust or Delinea.
• Experience securing access across cloud and on-prem environments.

Responsibilities

• Own the enterprise PAM strategy, roadmap, and operating model.
• Lead deployment and operation of PAM tools across environments.
• Manage privileged account lifecycles, vaulting, rotation and sessions.
• Implement just-in-time access, break-glass procedures and audit controls.
• Collaborate with Infrastructure, Cloud, SOX/Audit and Security Ops teams.

Skills

Privileged access management

Cybersecurity

Zero Trust

Team leadership

Identity security

Cloud security (Azure, AWS, GCP)

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems or related

Master’s degree (preferred)

Tools

CyberArk

BeyondTrust

Delinea

Azure

AWS

GCP

Job description

## Manager, Cybersecurity, Privileged Access Management - RemoteApply: Michigan, Kalamazoo 4100 East Milham Rd: Full time: Posted Today: R573261Work Flexibility: Remote**Preference will be given to candidates residing in the Eastern or Central time zones.**As a PAM Manager, you will lead Stryker’s enterprise Privileged Access Management program, protecting privileged accounts, credentials, secrets, and sessions across on-premises, cloud, and hybrid environments. You will own the PAM strategy and operating model, lead a team of analysts, and partner with Infrastructure, Cloud, Security Operations, Application, and Audit teams to reduce privileged access risk and support regulatory compliance.**What you will do:****Technical Responsibilities:**• Own the enterprise PAM strategy, roadmap, engineering standards, and operating model aligned with Zero Trust and least-privilege principles.• Lead the deployment and operation of CyberArk, BeyondTrust, or Delinea across privileged account, credential, secrets, and session-management use cases.• Manage the privileged account lifecycle, including provisioning, deprovisioning, vaulting, rotation, and check-in/check-out for human and shared privileged accounts.• Implement privileged session monitoring and recording for high-risk administrative access, just-in-time and time-bound access, and endpoint privilege management to remove local administrator rights and enforce application control.• Design and govern break-glass access procedures with approval and audit controls, and manage brokered, monitored, and time-limited third-party privileged access.• Partner with Infrastructure, Cloud, Security Operations, and Application teams to onboard privileged accounts and integrate PAM controls.• Support SOX, HIPAA, ISO 27001, and NIST Cybersecurity Framework requirements through reporting and audit evidence for privileged access controls.**Leadership & People Management Responsibilities:**• Lead PAM analysts by setting priorities, engineering standards, performance expectations, and day-to-day operating practices.**Knowledge and Capabilities:**• Assess privileged access risks, resolve complex identity-security issues, and balance competing program priorities.• Translate PAM risks, control requirements, and implementation decisions into clear guidance for technical teams, business partners, and auditors.**What You Need:****Required Qualifications**• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline• Minimum 8 years of experience in identity or cybersecurity, including a minimum 4 years of experience focused on privileged access management.• Hands-on experience deploying and operating CyberArk, BeyondTrust, or Delinea.• Experience with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management.• Experience securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments.• People-leadership or team-lead experience managing analysts or engineers.**Preferred Qualifications**• Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.• CyberArk Defender or Sentry, CISSP, BeyondTrust, or Delinea certification, or formal training in privileged access management, identity security, or Zero Trust architecture.**United States of America Pay Ranges:*** **USN**: $135,600 - $225,900 USD Annual* **US5**: $142,400 - $237,200 USD Annual* **US10**: $149,200 - $248,500 USD Annual* **US15**: $155,900 - $259,800 USD Annual* **US20**: $162,700 - $271,100 USD Annual* **US30**: $176,300 - $293,700 USD AnnualView the U.S. work location and transparency guide to find the pay range for your location.Travel Percentage: NoneStryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer – M/F/Veteran/Disability.Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.