Senior Privileged Access Management Specialist, Technology

Point72 Asset Management, L.P; New York (NY); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health care

Parental leave

Wellness programs

Volunteer opportunities

Matching gifts

Affinity groups

Tuition assistance

401(k)

Job summary

Point72’s Technology team is seeking a senior security professional to lead and mature our privileged access management program in New York. You will partner with infrastructure, security, cloud, and engineering teams to implement least-privilege controls, run certification campaigns, and drive governance across enterprise systems.

Candidates should have 8–10 years in information security with strong IAM, PAM, and compliance knowledge, and hands-on experience with CyberArk, SailPoint, and

Qualifications

• 8–10 years of experience in information security with a focus on identity and access management and privileged access management.
• Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent practical experience.
• Strong knowledge of privileged account lifecycle management, credential vaulting, privileged session management, least privilege, privileged elevation, and secrets management.
• Hands-on experience with privileged access management solutions, such as CyberArk, BeyondTrust, Delinea, Microsoft Entra PIM, or similar technologies.
• Experience with identity governance and administration platforms, such as SailPoint Identity Security Cloud, IdentityIQ, Saviynt, or similar technologies.
• Strong understanding of Active Directory, Microsoft Entra ID, Windows and Linux administration, enterprise authentication technologies, and authorization protocols (LDAP, Kerberos, SAML, OAuth, OpenID Connect, MFA).
• Knowledge of regulatory and security frameworks (SOX, ISO 27001, NIST, PCI DSS).
• Experience using data, dashboards, and AI tools to identify trends and validate outputs.
• Strong analytical, troubleshooting, communication, and stakeholder management skills.
• Commitment to the highest ethical standards.

Responsibilities

• Lead the implementation, adoption, and continuous improvement of the enterprise privileged access management program.
• Develop and maintain privileged access policies, standards, governance processes, and operating procedures.
• Partner with infrastructure, security, cloud, application, and engineering teams to onboard applications and accounts into the platform.
• Apply least privilege, segregation of duties, and risk-based access principles across workflows and remediation efforts.
• Lead privileged access certification campaigns and audit responses by validating access rights and remediating findings.
• Monitor operational health, security posture, and program effectiveness through dashboards and reports.
• Automate manual processes using scripting and APIs to reduce risk and improve efficiency.
• Use AI tools to accelerate analysis, streamline documentation, and support troubleshooting while validating outputs.
• Integrate privileged access controls with identity governance and other security processes across the enterprise.
• Mentor team members and evaluate emerging capabilities to mature the program.

Skills

IAM

Privileged Access

Compliance

Stakeholder mgmt

Automation

Education

Bachelor’s degree in CS/IS/Cybersecurity

Tools

CyberArk

BeyondTrust

Delinea

Microsoft Entra PIM

SailPoint Identity Security Cloud

Job description

A Career with Point72’s Technology Team

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open‑source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi‑billion‑dollar global business.

What you’ll do

• Lead the implementation, adoption, and continuous improvement of our enterprise privileged access management program to protect critical systems and sensitive access paths
• Develop and maintain privileged access policies, standards, governance processes, and operating procedures aligned with industry best practices and regulatory expectations
• Partner with infrastructure, security, cloud, application, and engineering teams to onboard applications, privileged accounts, service accounts, and systems into the platform
• Apply least privilege, segregation of duties, and risk‑based access principles across privileged access workflows and control remediation efforts
• Lead privileged access certification campaigns and audit responses by validating access rights, producing evidence, and remediating findings
• Monitor operational health, security posture, and program effectiveness through performance indicators, risk indicators, dashboards, trend analysis, and management reporting
• Automate manual processes using scripting, application programming interfaces, workflow automation, and targeted process improvements to reduce risk and improve efficiency
• Use enterprise‑approved artificial intelligence (AI) tools to accelerate analysis, streamline documentation, support troubleshooting, and improve decisions while validating generated outputs
• Integrate privileged access controls with identity governance, directory services, cloud security, infrastructure, audit, and risk processes across the enterprise
• Mentor team members and evaluate emerging capabilities to continuously mature the privileged access program

What’s required

• 8–10 years of experience in information security, with a strong focus on identity and access management and privileged access management
• Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent practical experience
• Strong knowledge of privileged account lifecycle management, credential vaulting, privileged session management, least privilege, privileged elevation, and secrets management
• Hands‑on experience with enterprise privileged access management solutions, such as CyberArk, BeyondTrust, Delinea, Microsoft Entra PIM, or similar technologies
• Experience with identity governance and administration platforms, such as SailPoint Identity Security Cloud, IdentityIQ, Saviynt, or similar technologies
• Strong understanding of Active Directory, Microsoft Entra ID, Windows and Linux administration, enterprise authentication technologies, and authorization protocols, such as LDAP, Kerberos, SAML, OAuth, OpenID Connect, and multifactor authentication
• Knowledge of regulatory and security frameworks, such as SOX, ISO 27001, NIST, PCI DSS, or similar compliance standards
• Experience using data, operational metrics, dashboards, and enterprise‑approved artificial intelligence tools to identify trends, improve documentation, enhance analysis, and validate generated outputs
• Strong analytical, troubleshooting, communication, and stakeholder management skills, with demonstrated ability to resolve complex access issues and lead cross‑functional technology and process adoption
• Commitment to the highest ethical standards

We take care of our people

We invest in our people, their careers, their health, and their well‑being. When you work here, we provide:

• Fully‑paid health care benefits
• Generous parental and family leave policies
• Mental and physical wellness programs
• Volunteer opportunities
• Non‑profit matching gift program
• Support for employee‑led affinity groups representing women, minorities and the LGBT+ community
• Tuition assistance
• A 401(k) savings program with an employer match and more

About Point72

Point72 is a leading global alternative investment firm led by Steven A. Cohen. Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain the industry's brightest talent by cultivating an investor‑led culture and committing to our people's long‑term growth. For more information, visit https://point72.com/.

The annual base salary range for this role is $140,000-$200,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.