Manager, Identity & Access Management

First Tech Federal Credit Union; Marlborough (MA); Hybrid; USD 117,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401(k) match

Paid Time Off and holidays

Sick time and personal days

Employee pricing on lending products

Job summary

First Tech Federal Credit Union seeks a Manager of Identity Access Management to oversee the IAM risk framework and provide 2LOD oversight of identity governance and access controls. You’ll partner with IT, Cybersecurity, Audit, Compliance and business stakeholders to strengthen IAM controls and governance across the organization.

You will manage risk assessments, certification processes, and reporting on IAM risk exposure, while supporting regulatory examinations and remediation efforts in a

Qualifications

• Bachelor's degree in a field related to IAM or 4+ years of relevant experience.
• 5+ years of IAM-related experience; 0-2 years as a People Leader.
• Strong knowledge of IAM governance, controls, and risk management.
• Experience supporting audits, examinations, and regulatory reviews.
• Familiarity with NIST, FFIEC, ISO, CIS frameworks.

Responsibilities

• Oversee IAM risk program, governance, assessments, controls, and monitoring.
• Evaluate design/effectiveness of IAM controls incl. provisioning and deprovisioning.
• Provide independent challenge of first-line IAM processes.
• Conduct risk assessments of IAM processes, systems and threats.
• Monitor risk indicators, control metrics, exceptions and remediation.
• Oversee access certification and governance processes for compliance.
• Review privileged access management and authentication controls.
• Collaborate with InfoSec, Tech, Compliance, and Audit for control effectiveness.
• Support regulatory examinations and independent reviews of IAM controls.
• Develop IAM risk reporting for leadership and governance forums.
• Maintain IAM risk policies, standards, and governance docs.
• Identify opportunities to improve IAM governance and control maturity.

Skills

IAM governance

Identity lifecycle management

Access controls

Privileged access management

Authentication controls

Regulatory frameworks (NIST FFIEC ISO)

Risk assessments

Audits & regulatory exams support

Stakeholder influence & challenge

Analytical & problem-solving skills

Education

Bachelor's degree in a relevant field

4+ years of relevant experience in lieu of degree

CISSP

CISA

CRISC

CISM

Job description

Description The Manager, Identity Access Management (IAM) is responsible for overseeing the organization's identity and access management risk framework and providing independent Second Line of Defense (2LOD) oversight of identity governance, access controls, privileged access management, and authentication practices. This role ensures IAM risks are appropriately identified, assessed, monitored, and managed in accordance with regulatory expectations, industry standards, and organizational risk appetite.

Description The Manager, Identity Access Management (IAM) is responsible for overseeing the organization's identity and access management risk framework and providing independent Second Line of Defense (2LOD) oversight of identity governance, access controls, privileged access management, and authentication practices. This role ensures IAM risks are appropriately identified, assessed, monitored, and managed in accordance with regulatory expectations, industry standards, and organizational risk appetite. This position partners closely with Information Technology, Cybersecurity, Internal Audit, Compliance, and business stakeholders to evaluate IAM control effectiveness, assess emerging risks, and strengthen identity governance practices across the organization. Here’s what you can expect from the job and what you need to be successful:

What You’ll Do

• Oversee the IAM risk management program, including governance, risk assessments, control evaluations, and monitoring activities.
• Evaluate the design and effectiveness of identity and access management controls, including user provisioning, deprovisioning, role-based access controls, privileged access management, segregation of duties, and authentication controls.
• Provide independent challenge and oversight of first-line IAM processes and access governance decisions.
• Conduct risk assessments of IAM processes, technologies, systems, and emerging identity-related threats.
• Monitor IAM-related risk indicators, control performance metrics, exceptions, and remediation activities.
• Oversee periodic access certification and governance processes, ensuring compliance with policies and regulatory requirements.
• Review and challenge privileged access management programs, identity lifecycle management processes, and authentication controls.
• Partner with Information Security, Technology, Compliance, and Internal Audit to evaluate control effectiveness and remediation plans.
• Support regulatory examinations, audits, and independent reviews involving access management and cybersecurity controls.
• Develop and deliver reporting on IAM risk exposure, control effectiveness, and emerging risks to leadership and governance forums.
• Support development and maintenance of IAM risk policies, standards, and governance documentation.
• Identify opportunities to improve IAM governance, risk management practices, and control maturity.

Essential Skills

• Required Education:Bachelor's degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree), advanced degree preferred.
• Required Experience: 5+ years of relevant experience, 0 - 2 years as a People Leader
• Strong understanding of IAM governance and controls.
• Knowledge of access management, privileged access management, authentication, and identity lifecycle management.
• Understanding of cybersecurity frameworks (NIST, FFIEC, ISO, CIS).
• Experience assessing technology and cybersecurity risks.
• Strong analytical and problem-solving skills.
• Ability to influence stakeholders and provide effective challenge.
• Experience supporting audits, examinations, and regulatory reviews.

Preferred Certifications

• CISSP
• CISA
• CRISC
• CISM

Location

Marlborough or Chelmsford, MA | Hillsboro, OR (HYBRID)

Target Compensation

$116,500 - $140,000 + annual bonus

Schedule

Monday through Friday 8a-5p

Who We Are

Every great journey begins with a bold idea—and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.

Employees Are Eligible For

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)

Employment Statements

First Tech is an equal opportunity employer, and we value diversity, inclusion, and equity at our company. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

First Tech is not currently offering Visa transfer/sponsorship for this position.