Privileged Access Management Lead

Mizuho Financial Group Inc.; United States; Hybrid; USD 200,000 - 275,000; Full time

Benefits offered by this job

Hybrid work model

Discretionary bonus

Competitive benefits

Job summary

Mizuho Financial Group, Inc. is seeking a Privileged Access Management Lead to design and govern a firmwide PAM strategy, lead the PAM engineering and operations teams, and ensure risk and regulatory alignment across all apps and environments.

The ideal candidate will drive standardized access models, implement CyberArk and related PAM technologies, and close audit gaps while enabling automation and scalable PAM across Unix, Windows, databases, and cloud platforms.

Qualifications

• 10+ years in Identity and Access Management or Information Security, with 5+ years in a dedicated PAM role.
• Deep experience with CyberArk, SailPoint, Splunk and other relevant IAM technologies.
• Proven success remediating regulatory or audit findings related to privileged access.
• Strong understanding of Unix/Linux, Windows, Active Directory, cloud platforms (AWS/Azure), and databases from a PAM perspective.
• Experience in implementing Just-In-Time access, session monitoring & verification frameworks, and access models across platforms.
• Experience leading privileged access onboarding at scale, including custom applications.
• Strong familiarity with control frameworks including NIST CSF 2.0 and CRI.

Responsibilities

• Develop and execute a multiyear PAM roadmap aligned with enterprise risk, audit remediation plans, and platform capabilities.
• Lead the development of platform-specific access models and ensure integration into IAM architecture.
• Act as the PAM SME to executive stakeholders, internal audit, and regulators.
• Lead, mentor, and develop the PAM engineering and operations team, ensuring clear accountability and alignment with strategic goals.
• Ensure workload prioritization, issue resolution, and delivery against service-level commitments.
• Manage day-to-day privileged account onboarding, session monitoring, password rotation, and exception handling.
• Drive integration of PAM with SailPoint and Splunk to enable end-to-end automation and visibility.
• Collaborate with GRC and Internal Audit to define KRIs/KPIs to measure control effectiveness and operational performance.
• Partner with Infrastructure, Application, and Cybersecurity teams to operationalize PAM controls in alignment with platform and business needs.
• Oversee vendor partnerships supporting PAM delivery, while ensuring in-house capability ownership and quality.

Skills

IAM & InfoSec

CyberArk

SailPoint

Splunk

Unix/Linux

Windows

AD/Active Directory

AWS/AZURE

Just-In-Time access

Audit/remediation

Tools

CyberArk

SailPoint

Splunk

Job description

Position Overview

Join Mizuho as a Privileged Access Management Lead! The Lead for Privileged Access Management (PAM) Services is responsible for designing, governing, and executing a firmwide strategy for securing and managing privileged access across all applications, platforms, and environments. This role provides direct leadership of the PAM engineering and operations team, with accountability for strategic alignment, operational execution, and lifecycle governance of privileged access services. The ideal candidate will drive the implementation of standardized access models, ensure effective deployment of CyberArk and related PAM technologies, and lead the closure of regulatory findings and audit gaps. The ideal candidate brings deep technical expertise, a strong command of regulatory expectations, and proven experience scaling PAM capabilities in complex environments. This role is essential to reducing risk, enabling automation, and delivering sustainable compliance across the enterprise.

Key Responsibilities

Strategic Leadership

• Develop and execute a multiyear PAM roadmap aligned with enterprise risk, audit remediation plans, and platform capabilities.
• Lead the development of strategic access models per platform and ensure integration into IAM and security architecture.
• Act as the PAM SME to executive stakeholders, internal audit, and regulators.

Operational Execution and Team Leadership

• Lead, mentor, and develop the PAM engineering and operations team, ensuring clear accountability, role clarity, and alignment with strategic goals.
• Ensure effective workload prioritization, issue resolution, and delivery against service-level commitments.
• Manage day-to-day execution of privileged account onboarding, session monitoring & verification, password rotation, and exception handling.
• Implement and enforce access models for each platform (Unix, Windows, Network, DB, etc.).
• Drive integration of PAM with SailPoint and Splunk to enable end-to-end automation and visibility.
• Drive continuous improvement in engineering, operations, and user experience across the PAM lifecycle.

Compliance and Control

• Own remediation of PAM-related audit findings, including gaps in privileged account discovery, validation, and process consistency.
• Define and enforce controls for break-glass and emergency access and implement compensating controls where needed.
• Ensure quarterly privileged access reviews are automated, complete, and audit-ready.
• Collaborate with GRC and Internal Audit to define KRIs/KPIs to measure control effectiveness and operational performance.

Cross-Functional Engagement

• Partner with Infrastructure, Application, and Cybersecurity teams to operationalize PAM controls in alignment with platform and business needs.
• Collaborate with GRC and Internal Audit teams to define policy requirements and ensure control effectiveness.
• Manage vendor partnerships supporting PAM delivery, while ensuring in-house capability ownership and quality.
• Participate in architecture reviews to ensure PAM integration in all new projects.

Required Qualifications

• 10+ years in Identity and Access Management or Information Security, with 5+ years in a dedicated PAM role.
• Deep experience with CyberArk, SailPoint, Splunk and other relevant IAM technologies.
• Proven success in remediating regulatory or audit findings related to privileged access.
• Strong understanding of Unix/Linux, Windows, Active Directory, cloud platforms (AWS/Azure), and databases from a privileged access perspective.
• Experience in implementing Just-In-Time access, session monitoring & verification frameworks, and access models across platforms.
• Experience leading privileged access onboarding at scale, including custom applications.
• Strong familiarity with control frameworks including NIST CSF 2.0 and CRI.

Preferred Qualifications

• CISSP, CISM, or relevant cybersecurity certification.
• Experience working in regulated financial environments.

The expected base salary ranges from $200k-$275k. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications and licenses obtained. Market and organizational factors are also considered.

In addition to salary and a generous employee benefits package, successful candidates are eligible to receive a discretionary bonus.

#LI-Hybrid

Other requirements

Mizuho has in place a hybrid working program, with varying opportunities for remote work depending on the nature of the role, needs of your department, as well as local laws and regulatory obligations. Roles in some of our departments have greater in-office requirements that will be communicated to you as part of the recruitment process.

Company Overview

Mizuho Financial Group, Inc. is the 15th largest bank in the world as measured by total assets of ~$2 trillion. Mizuho's 60,000 employees worldwide offer comprehensive financial services to clients in 35 countries and 800 offices throughout the Americas, EMEA and Asia. Mizuho Americas is a leading provider of corporate and investment banking services to clients in the US, Canada, and Latin America. Through its acquisition of Greenhill, Mizuho provides M&A, restructuring and private capital advisory capabilities across Americas, Europe and Asia. Mizuho Americas employs approximately 3,500 professionals, and its capabilities span corporate and investment banking, capital markets, equity and fixed income sales & trading, derivatives, FX, custody and research. Visit www.mizuhoamericas.com.

Mizuho Americas offers a competitive total rewards package. We are an EEO/AA Employer - M/F/Disability/Veteran. We participate in the E-Verify program. We maintain a drug-free workplace and reserve the right to require pre- and post-hire drug testing as permitted by applicable law.

#LI-MIZUHO

Why Mizuho

Mizuho is in growth mode as we are climbing the league tables, disrupting the status quo, and attracting top talent. Positions are available across our corporate functions, and on our corporate and investment banking, capital markets, advisory, research, sales & trading, derivatives, and financing teams. We are looking for candidates who want to contribute to our entrepreneurial culture where people at all levels are inspired to share ideas. Our creativity sets us apart, and our perseverance drives results in creating bespoke, client-focused solutions.

If you are interested in advancing your career working for a firm with a growth mindset and the resources of a global financial services team, we would like to hear from you. For more information, please view our Recruiting Brochure