Manager, Identity & Access Management

Digital Federal Credit Union; Marlborough (MA); Hybrid; USD 117,000 - 140,000; Full time

Benefits offered by this job

Health benefits

401(k) match

Paid time off

Paid holidays

Employee pricing

Job summary

First Tech and DCU are seeking a Manager, Identity Access Management (IAM) to oversee the IAM risk framework and provide 2LOD oversight of identity governance, access controls, privileged access management, and authentication practices in a hybrid work environment.

You will partner with IT, Cybersecurity, Internal Audit, Compliance, and business stakeholders to evaluate control effectiveness, assess risks, and strengthen identity governance across the organization.

Qualifications

• Bachelor's degree in field relevant to role or 4+ years of relevant experience in lieu of degree.
• 5+ years of relevant IAM experience, 0–2 years in a People Leader role.
• Strong understanding of IAM governance and controls.
• Knowledge of access management, privileged access management, authentication, and identity lifecycle management.
• Experience supporting audits, examinations, and regulatory reviews.

Responsibilities

• Oversee the IAM risk management program, including governance, risk assessments, control evaluations, and monitoring activities.
• Evaluate the design and effectiveness of identity and access management controls across provisioning, deprovisioning, RBAC, and authentication controls.
• Provide independent challenge and oversight of first-line IAM processes and access governance decisions.
• Conduct risk assessments of IAM processes, technologies, systems, and identity-related threats.
• Monitor IAM-related risk indicators, control performance metrics, exceptions, and remediation activities.
• Oversee periodic access certification and governance processes to ensure policy/regulatory compliance.
• Review privileged access management programs and identity lifecycle management processes.
• Collaborate with Information Security, Technology, Compliance, and Internal Audit to evaluate control effectiveness and remediation plans.
• Support regulatory examinations, audits, and independent reviews involving access management and cybersecurity controls.
• Develop and deliver reporting on IAM risk exposure, control effectiveness, and emerging risks to leadership and governance forums.
• Support development and maintenance of IAM risk policies, standards, and governance documentation.
• Identify opportunities to improve IAM governance, risk management practices, and control maturity.

Skills

IAM governance

Access management

Privileged access

Authentication controls

NIST/FFIEC/ISO/CIS

Audits/regulatory reviews

Stakeholder influence

Education

Bachelor's degree or 4+ years experience in lieu

Job description

Description

The Manager, Identity Access Management (IAM) is responsible for overseeing the organization's identity and access management risk framework and providing independent Second Line of Defense (2LOD) oversight of identity governance, access controls, privileged access management, and authentication practices. This role ensures IAM risks are appropriately identified, assessed, monitored, and managed in accordance with regulatory expectations, industry standards, and organizational risk appetite.

This position partners closely with Information Technology, Cybersecurity, Internal Audit, Compliance, and business stakeholders to evaluate IAM control effectiveness, assess emerging risks, and strengthen identity governance practices across the organization.

Here's what you can expect from the job and what you need to be successful:

What You'll Do:

• Oversee the IAM risk management program, including governance, risk assessments, control evaluations, and monitoring activities.
• Evaluate the design and effectiveness of identity and access management controls, including user provisioning, deprovisioning, role-based access controls, privileged access management, segregation of duties, and authentication controls.
• Provide independent challenge and oversight of first-line IAM processes and access governance decisions.
• Conduct risk assessments of IAM processes, technologies, systems, and emerging identity-related threats.
• Monitor IAM-related risk indicators, control performance metrics, exceptions, and remediation activities.
• Oversee periodic access certification and governance processes, ensuring compliance with policies and regulatory requirements.
• Review and challenge privileged access management programs, identity lifecycle management processes, and authentication controls.
• Partner with Information Security, Technology, Compliance, and Internal Audit to evaluate control effectiveness and remediation plans.
• Support regulatory examinations, audits, and independent reviews involving access management and cybersecurity controls.
• Develop and deliver reporting on IAM risk exposure, control effectiveness, and emerging risks to leadership and governance forums.
• Support development and maintenance of IAM risk policies, standards, and governance documentation.
• Identify opportunities to improve IAM governance, risk management practices, and control maturity.

Essential Skills:

• Required Education: Bachelor's degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree), advanced degree preferred.
• Required Experience: 5+ years of relevant experience, 0 - 2 years as a People Leader
• Strong understanding of IAM governance and controls.
• Knowledge of access management, privileged access management, authentication, and identity lifecycle management.
• Understanding of cybersecurity frameworks (NIST, FFIEC, ISO, CIS).
• Experience assessing technology and cybersecurity risks.
• Strong analytical and problem-solving skills.
• Ability to influence stakeholders and provide effective challenge.
• Experience supporting audits, examinations, and regulatory reviews.

Preferred Certifications:

• CISSP
• CISA
• CRISC
• CISM

Location:

Marlborough or Chelmsford, MA | Hillsboro, OR (HYBRID)

Target Compensation:

$116,500 - $140,000 + annual bonus

Schedule:

Monday through Friday 8a-5p

Who We Are:

Every great journey begins with a bold idea-and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.

What makes First Tech different? Click here to learn more!

Employees are eligible for:

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)

Employment Statements:

First Tech is an equal opportunity employer, and we value diversity, inclusion, and equity at our company. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

If you're applying for a job and need a reasonable accommodation for any part of the employment process, please send an email to [e-mail] and let us know the nature of your request and contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address.

First Tech is not currently offering Visa transfer/sponsorship for this position.