SVP, Head of Identity & Access Management

LPL Financial; New York (NY); On-site; USD 213,000 - 354,000; Full time

Job summary

LPL Financial is seeking a Senior Vice President, Identity & Access Management to lead the enterprise IAM organization, advancing identity security, governance, engineering, and operations across the firm. Reporting to the CISO, the SVP will oversee IGA, PAM, authentication services, and platform modernization, driving Zero Trust, resilience, automation, and regulatory compliance.

This executive role partners with Risk, Governance, and Technology leaders to enable secure growth across a large

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, Engineering, or related discipline.
• 15+ years of progressive leadership experience in cybersecurity, identity management, or enterprise technology.
• 8+ years leading large-scale IAM, cybersecurity, or security engineering organizations.
• Deep expertise in Identity Governance & Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO), MFA, Federation, and cloud identity technologies.

Responsibilities

• Lead vision, strategy, and execution of IAM program.
• Establish multi-year IAM roadmap aligned to Cybersecurity and Technology priorities.
• Oversee IAM operations, platform stability, service delivery, and risk management.
• Drive governance processes and identity controls improvements.
• Develop executive reporting on IAM risks, priorities, and performance.
• Lead Identity Governance and Administration programs (provisioning, deprovisioning, access reviews).
• Ensure least-privilege and Zero Trust across the enterprise.

Skills

Identity Governance

Privileged Access Management

Single Sign-On

MFA

Federation & Authentication

Directory Services

Cloud Identity

Executive Communication

Education

Bachelor’s degree

Master’s degree

Certifications: CISSP/CISM/CRISC

Tools

Ping Identity

ForgeRock

Microsoft Entra ID

Active Directory

CyberArk

Job description

_ Lead with Purpose, Unlock Your Team’s Passion _

At LPL, people leaders hold the key to the employee experience — shaping culture, driving performance, and guiding individuals to new heights. Because when that happens, we all win – clients, LPL, and most importantly our, employees.

Position Summary

The Senior Vice President, Identity & Access Management (IAM) is responsible for leading LPL Financial’s enterprise IAM organization and advancing the firm’s identity security strategy, governance, engineering, operations, and resiliency capabilities.

This executive leader oversees all aspects of workforce, advisor, partner, and privileged identity management, ensuring secure and compliant access to firm resources while enabling business growth and digital transformation. The SVP will lead a large-scale IAM organization responsible for Identity Governance & Administration (IGA), Privileged Access Management (PAM), Authentication Services, Directory Services, Identity Engineering, Production Support, and Identity Platform Operations. The role will also drive modernization efforts focused on Zero Trust principles, operational resilience, automation, cloud identity services, and regulatory compliance.

Reporting directly to the Chief Information Security Officer (CISO), this position will partner closely with Technology, Infrastructure, Enterprise Architecture, Risk Management, Compliance, Internal Audit, Human Capital, and business leaders across the organization.

What You’ll Do

Enterprise IAM Leadership

• Lead the vision, strategy, and execution of LPL’s Identity & Access Management program.
• Establish a multi-year IAM roadmap aligned to Cybersecurity and Technology priorities.
• Serve as the senior leader accountable for IAM operations, platform stability, service delivery, and risk management.
• Drive continuous improvement of identity controls, governance processes, and operational effectiveness.
• Develop and maintain executive-level reporting on IAM risks, priorities, performance, and organizational health.

Identity Security & Governance

• Lead Identity Governance and Administration programs, including provisioning, deprovisioning, access certification, role management, and segregation-of-duties controls.
• Ensure adherence to least-privilege and Zero Trust security principles across the enterprise.
• Establish IAM policies, standards, and governance frameworks.
• Partner with Risk and Compliance teams to ensure alignment with regulatory and audit requirements.

Platform Engineering & Operations

• Oversee IAM engineering, production support, and operational teams responsible for enterprise identity platforms.
• Lead modernization efforts across Ping Identity, ForgeRock, Active Directory, Entra ID, authentication services, federation, and Single Sign-On capabilities.
• Ensure scalability, resiliency, and operational excellence across critical identity infrastructure.
• Drive automation and reduction of manual operational processes to improve reliability and risk management.

Privileged Access Management

• Lead strategy and governance for privileged access across users, systems, applications, and service accounts.
• Strengthen access controls through centralized governance, monitoring, and least-privileged access models.
• Ensure effective controls over administrative and elevated access activities.

Operational Resilience & Stability

• Own resilience and availability strategies for critical IAM platforms and services.
• Lead initiatives related to disaster recovery, high availability, identity provider resiliency, and business continuity planning.
• Partner with Architecture and Engineering teams to improve platform reliability and reduce operational risk.
• Establish metrics and accountability frameworks supporting production stability and change governance.

Organizational Leadership

• Lead and develop a high-performing organization consisting of leaders, architects, engineers, analysts, and support professionals.
• Foster a culture of accountability, collaboration, innovation, and continuous improvement.
• Develop succession plans and organizational capabilities to support future growth.
• Manage budgets, vendor relationships, workforce planning, and strategic investments.

Executive Comportment

• Thrives in a fast-paced, high-growth environment where scale, priorities, and organizational structure evolve quickly.
• Balances pace and pragmatism with disciplined risk management, favoring practical progress over process for its own sake.
• Builds trust and credibility quickly across a highly matrixed organization, earning confidence from business partners, technology peers, auditors, and regulators alike.
• Leads confidently through ambiguity, translating strategic intent into action even where processes or org structures are still maturing.
• Is a visible, hands-on leader who is equally comfortable stepping back to coach, empower, and grow the team as the organization scales.
• Brings resilience and an ownership mindset, adapting readily as business priorities, regulatory expectations, and the threat landscape shift.
• Communicates with transparency and executive presence, building confidence with senior leadership, the Board, and regulators.

Qualifications

Required

• Bachelor’s degree in Information Security, Computer Science, Information Systems, Engineering, or related discipline.
• 15+ years of progressive leadership experience in cybersecurity, identity management, or enterprise technology.
• 8+ years leading large-scale IAM, cybersecurity, or security engineering organizations.
• Deep expertise in:
• Identity Governance & Administration (IGA)
• Privileged Access Management (PAM)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Federation and authentication platforms
• Directory Services and cloud identity technologies
• Experience leading enterprise transformation and modernization programs.
• Demonstrated success managing large, geographically dispersed technical organizations.
• Strong executive communication and stakeholder management skills.

Preferred

• Experience within financial services, wealth management, banking, brokerage, or other highly regulated industries.
• Experience with Ping Identity, ForgeRock, Microsoft Entra ID, Active Directory, CyberArk, or related identity technologies.
• Master’s degree in a related field.
• CISSP, CISM, CRISC, CGEIT, or equivalent certifications

Pay Range:

$212,695.00 - $354,423.00

Actual base salary varies based on factors, including but not limited to, relevant skill, prior experience, education, base salary of internal peers, demonstrated performance, and geographic location. Additionally, LPL Total Rewards package is highly competitive, designed to support your success at work, at home, and at play – such as 401K matching, health benefits, employee stock options, paid time off, volunteer time off, and more.

Company Overview:

LPL Financial Holdings Inc. (Nasdaq: LPLA) is among the fastest growing wealth management firms in the U.S. As a leader in the financial advisor-mediated marketplace(6) , LPL supports over 32,000 financial advisors and the wealth management practices of approximately 1,100 financial institutions, servicing and custodying approximately $2.3 trillion in brokerage and advisory assets on behalf of approximately 8 million Americans. The firm provides a wide range of advisor affiliation models, investment solutions, fintech tools and practice management services, ensuring that advisors and institutions have the flexibility to choose the business model, services, and technology resources they need to run thriving businesses. For further information about LPL, please visit www.lpl.com.

At LPL, independence means that advisors and institution leaders have the freedom they deserve to choose the business model, services, and technology resources that allow them to run a thriving business. They have the flexibility to do business their way. And they have the freedom to manage their client relationships, because they know their clients best. Simply put, we take care of our advisors and institutions, so they can take care of their clients.

For further information about LPL, please visit www.lpl.com.

Information on Interviews:

LPL will only communicate with a job applicant directly from an @lplfinancial.com email address and will never conduct an interview online or in a chatroom forum. During an interview, LPL will not request any form of payment from the applicant, or information regarding an applicant’s bank or credit card. Should you have any questions regarding the application process, please contact LPL’s Human Resources Solutions Center at(855) 575-6947.

EAC 5.19.26