Manager, Cybersecurity, Privileged Access Management - Remote

Stryker Group; Northern (KY); Hybrid; USD 149,000 - 271,000; Full time

Job summary

Stryker Group is seeking a PAM Manager to lead the enterprise Privileged Access Management program across on-premises, cloud, and hybrid environments.

You will own the PAM strategy, manage a team of analysts, and partner with Infrastructure, Cloud, Security Operations, Application, and Audit teams to reduce privileged access risks and support compliance with SOX, HIPAA, ISO 27001, and NIST frameworks.

Qualifications

• Bachelor's degree or higher in a related field.
• 8+ years in identity or cybersecurity, 4+ years in PAM.
• Hands-on with CyberArk, BeyondTrust, or Delinea.
• Experience securing privileged access across cloud and on-prem environments.

Responsibilities

• Own enterprise PAM strategy, roadmap, and operating model.
• Lead deployment/operation of PAM tools across privileged accounts and sessions.
• Manage privileged account lifecycle, vaulting, rotation, and check-in/out for human/shared accounts.
• Implement privileged session monitoring and just-in-time access; enforce least privilege.

Skills

Privileged access management

CyberArk

BeyondTrust

Delinea

Identity security

Leadership

Education

Bachelor's degree in Computer Science / Cybersecurity / Information Systems / Engineering / Business Administration

Master's degree in Computer Science / Cybersecurity / Information Systems / Engineering

Tools

CyberArk

BeyondTrust

Delinea

Job description

Preference will be given to candidates residing in the Eastern or Central time zones.

As a PAM Manager, you will lead Stryker’s enterprise Privileged Access Management program, protecting privileged accounts, credentials, secrets, and sessions across on-premises, cloud, and hybrid environments. You will own the PAM strategy and operating model, lead a team of analysts, and partner with Infrastructure, Cloud, Security Operations, Application, and Audit teams to reduce privileged access risk and support regulatory compliance.

What you will do:

Technical Responsibilities:

• Own the enterprise PAM strategy, roadmap, engineering standards, and operating model aligned with Zero Trust and least-privilege principles.
• Lead the deployment and operation of CyberArk, BeyondTrust, or Delinea across privileged account, credential, secrets, and session-management use cases.
• Manage the privileged account lifecycle, including provisioning, deprovisioning, vaulting, rotation, and check-in/check-out for human and shared privileged accounts.
• Implement privileged session monitoring and recording for high-risk administrative access, just-in-time and time-bound access, and endpoint privilege management to remove local administrator rights and enforce application control.
• Design and govern break-glass access procedures with approval and audit controls, and manage brokered, monitored, and time-limited third-party privileged access.
• Partner with Infrastructure, Cloud, Security Operations, and Application teams to onboard privileged accounts and integrate PAM controls.
• Support SOX, HIPAA, ISO 27001, and NIST Cybersecurity Framework requirements through reporting and audit evidence for privileged access controls.

Leadership & People Management Responsibilities:

• Lead PAM analysts by setting priorities, engineering standards, performance expectations, and day-to-day operating practices.

Knowledge and Capabilities:

• Assess privileged access risks, resolve complex identity-security issues, and balance competing program priorities.
• Translate PAM risks, control requirements, and implementation decisions into clear guidance for technical teams, business partners, and auditors.

What You Need:

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline
• Minimum 8 years of experience in identity or cybersecurity, including a minimum 4 years of experience focused on privileged access management.
• Hands-on experience deploying and operating CyberArk, BeyondTrust, or Delinea.
• Experience with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management.
• Experience securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments.
• People-leadership or team-lead experience managing analysts or engineers.

Preferred Qualifications

• Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline.
• CyberArk Defender or Sentry, CISSP, BeyondTrust, or Delinea certification, or formal training in privileged access management, identity security, or Zero Trust architecture.

United States of America Pay Ranges:

• USN: $135,600 - $225,900 USD Annual
• US5: $142,400 - $237,200 USD Annual
• US10: $149,200 - $248,500 USD Annual
• US15: $155,900 - $259,800 USD Annual
• US20: $162,700 - $271,100 USD Annual
• US30: $176,300 - $293,700 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.