Privileged Access Management Lead

Mizuho; Woodbridge Township (NJ); Hybrid; USD 200,000 - 275,000; Full time

Benefits offered by this job

Hybrid work flexibility

Competitive compensation package

Discretionary bonus

Job summary

Mizuho is seeking a Privileged Access Management Lead to design, govern, and execute a firmwide PAM strategy. You will lead the PAM engineering and operations teams, drive standardized access models, and ensure effective deployment of CyberArk and related technologies across Unix, Windows, and cloud platforms.

Responsibilities include delivering a multi-year PAM roadmap, automating privileged access reviews, and collaborating with IAM, GRC, and audit teams to meet regulatory expectations.

Qualifications

• 10+ years in Identity and Access Management or Information Security, with 5+ years PAM.
• Proven success remediating audit findings related to privileged access.
• Strong understanding of Unix/Linux, Windows, AD, and cloud platforms (AWS/Azure).
• Experience with Just-In-Time access and session monitoring across platforms.

Responsibilities

• Define and govern a multi-year PAM roadmap aligned to risk and audit remediation.
• Lead PAM engineering and operations teams and ensure alignment with security architecture.
• Drive integration of PAM with SailPoint and Splunk for automation and visibility.
• Own remediation of PAM audit findings and conduct quarterly privileged access reviews.
• Collaborate with cross-functional teams to operationalize PAM controls across platforms.

Skills

IAM expert

PAM leadership

CyberArk

SailPoint

Splunk

Audit remediation

Unix/Linux

Windows AD

Cloud AWS/Azure

Just-In-Time access

Session monitoring

Privilege models

Education

CISSP, CISM

Tools

CyberArk

SailPoint

Splunk

Job description

Join Mizuho as a Privileged Access Management Lead!

Position Overview

The Lead for Privileged Access Management (PAM) Services is responsible for designing, governing, and executing a firmwide strategy for securing and managing privileged access across all applications, platforms, and environments. This role provides direct leadership of the PAM engineering and operations team, with accountability for strategic alignment, operational execution, and lifecycle governance of privileged access services. The ideal candidate will drive the implementation of standardized access models, ensure effective deployment of CyberArk and related PAM technologies, and lead the closure of regulatory findings and audit gaps. The ideal candidate brings deep technical expertise, a strong command of regulatory expectations, and proven experience scaling PAM capabilities in complex environments. This role is essential to reducing risk, enabling automation, and delivering sustainable compliance across the enterprise.

Key Responsibilities

Strategic Leadership

• Develop and execute a multiyear PAM roadmap aligned with enterprise risk, audit remediation plans, and platform capabilities.
• Lead the development of strategic access models per platform and ensure integration into IAM and security architecture.
• Act as the PAM SME to executive stakeholders, internal audit, and regulators.

Operational Execution and Team Leadership

• Lead, mentor, and develop the PAM engineering and operations team, ensuring clear accountability, role clarity, and alignment with strategic goals.
• Ensure effective workload prioritization, issue resolution, and delivery against service-level commitments.
• Manage day-to-day execution of privileged account onboarding, session monitoring & verification, password rotation, and exception handling.
• Implement and enforce access models for each platform (Unix, Windows, Network, DB, etc.).
• Drive integration of PAM with SailPoint and Splunk to enable end-to-end automation and visibility.
• Drive continuous improvement in engineering, operations, and user experience across the PAM lifecycle

Compliance and Control

• Own remediation of PAM-related audit findings, including gaps in privileged account discovery, validation, and process consistency.
• Define and enforce controls for break-glass and emergency access and implement compensating controls where needed.
• Ensure quarterly privileged access reviews are automated, complete, and audit-ready.
• Collaborate with GRC and Internal Audit to define KRIs/KPIs to measure control effectiveness and operational performance.

Cross-Functional Engagement

• Partner with Infrastructure, Application, and Cybersecurity teams to operationalize PAM controls in alignment with platform and business needs.
• Collaborate with GRC and Internal Audit teams to define policy requirements and ensure control effectiveness.
• Manage vendor partnerships supporting PAM delivery, while ensuring in-house capability ownership and quality.
• Participate in architecture reviews to ensure PAM integration in all new projects.

Required Qualifications

• 10+ years in Identity and Access Management or Information Security, with 5+ years in a dedicated PAM role.
• Deep experience with CyberArk, SailPoint, Splunk and other relevant IAM technologies
• Proven success in remediating regulatory or audit findings related to privileged access.
• Strong understanding of Unix/Linux, Windows, Active Directory, cloud platforms (AWS/Azure), and databases from a privileged access perspective.
• Experience in implementing Just-In-Time access, session monitoring & verification frameworks, and access models across platforms.
• Experience leading privileged access onboarding at scale, including custom applications.
• Strong familiarity with control frameworks including NIST CSF 2.0 and CRI

Preferred Qualifications

• CISSP, CISM, or relevant cybersecurity certification.
• Experience working in regulated financial environments.

The expected base salary ranges from $200k-$275k. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications and licenses obtained. Market and organizational factors are also considered. In addition to salary and a generous employee benefits package, successful candidates are eligible to receive a discretionary bonus.

Other Requirements

Mizuho has in place a hybrid working program, with varying opportunities for remote work depending on the nature of the role, needs of your department, as well as local laws and regulatory obligations. Roles in some of our departments have greater in-office requirements that will be communicated to you as part of the recruitment process.

Company Overview

Mizuho Financial Group, Inc. is the 15th largest bank in the world as measured by total assets of ~$2 trillion. Mizuho's 60,000 employees worldwide offer comprehensive financial services to clients in 35 countries and 800 offices throughout the Americas, EMEA and Asia. Mizuho Americas is a leading provider of corporate and investment banking services to clients in the US, Canada, and Latin America. Through its acquisition of Greenhill , Mizuho provides M&A, restructuring and private capital advisory capabilities across Americas, Europe and Asia. Mizuho Americas employs approximately 3,500 professionals, and its capabilities span corporate and investment banking, capital markets, equity and fixed income sales & trading, derivatives, FX, custody and research. Visit www.mizuhoamericas.com.

Mizuho Americas offers a competitive total rewards package.

We are an EEO/AA Employer - M/F/Disability/Veteran.

We participate in the E-Verify program.

We maintain a drug-free workplace and reserve the right to require pre- and post-hire drug testing as permitted by applicable law.