Senior IAM Program Lead — RBAC & Compliance

Gilead Sciences Inc.; Maryland; Sur place; USD 147 000 - 190 000; Plein temps

Résumé du poste

Gilead Sciences Inc. is seeking a senior IAM leader to own and mature enterprise identity governance, RBAC strategy, and access certification programs across hybrid environments.

You will partner with Security, Architecture, and business stakeholders to enforce controls, ensure audit readiness, and drive continuous service improvement of IAM platforms. The role focuses on DOJ DSP, GxP, and 21 CFR Part 11 compliance, overseeing operations, vendor management, and onboarding applications to reduce

Qualifications

• Bachelor's degree plus 6+ years of IT and/or Information Security experience.
• Strong experience owning and operating IAM governance and control functions, including certification and RBAC at enterprise scale.
• Hands‑on experience with IAM platforms such as SailPoint IdentityIQ, SailPoint Identity Security Cloud, or Saviynt.
• Deep experience with access certification programs, RBAC design, and identity lifecycle governance.
• Understanding of regulatory‑driven IAM controls, including DOJ DSP, GxP, and 21 CFR Part 11.
• Experience leading IAM operations and service delivery in complex, hybrid enterprise environments.
• Working knowledge of directory services (Active Directory, LDAP) and application integration patterns.

Responsabilités

• Owns enterprise IAM control effectiveness, ensuring identity governance, certification, and access controls are consistently enforced, measurable, and audit-ready across systems and data domains.
• Leads and governs DOJ Data Security Program (DSP) IAM controls, including definition, implementation, and ongoing validation of access restrictions protecting sensitive and regulated data.
• Drives and matures access certification programs, including campaign strategy, execution oversight, reviewer accountability, exception governance, and remediation enforcement.
• Owns role-based access control (RBAC) strategy and execution, including role engineering, role lifecycle management, and alignment to least privilege and compliance requirements.
• Establishes and enforces standardized access models and certification scope across enterprise and cloud applications, ensuring consistency and scalability.
• Oversees identity lifecycle management (joiner, mover, leaver) as a controlled process, ensuring timely and accurate provisioning aligned with authoritative data sources and governance policies.
• Provides leadership over IAM operations, including access request fulfillment, incident/problem management, and operational issue resolution across integrated platforms.
• Acts as service owner for IAM platforms, accountable for availability, performance, control enforcement, and continuous service improvement.
• Manages managed service providers and vendors supporting IAM, including defining SLAs/KPIs, monitoring performance, and enforcing delivery accountability.
• Drives onboarding of applications into IAM platforms with a focus on RBAC alignment, certification inclusion, and governance standardization, reducing control gaps.
• Ensures IAM processes and controls support audit, compliance, and regulatory readiness, including GxP and 21 CFR Part 11 requirements.
• Partners with Security, Architecture, and business stakeholders to evolve IAM control frameworks and improve governance effectiveness across the enterprise.
• Identifies and implements improvements to IAM processes, tools, and operating models to enhance control maturity, operational efficiency, and scalability.

Connaissances

IAM governance

RBAC design

Access certification

Identity lifecycle governance

Hybrid enterprise environments

Service delivery leadership

Formation

Bachelor's degree + 6+ years IT/Security

Outils

SailPoint IdentityIQ

SailPoint Identity Security Cloud

Saviynt

Active Directory

LDAP

Description du poste

Gilead Sciences Inc. is seeking a senior IAM leader to own and mature enterprise identity governance, RBAC strategy, and access certification programs across hybrid environments.

You will partner with Security, Architecture, and business stakeholders to enforce controls, ensure audit readiness, and drive continuous service improvement of IAM platforms. The role focuses on DOJ DSP, GxP, and 21 CFR Part 11 compliance, overseeing operations, vendor management, and onboarding applications to reduce