VP of Identity & Access Management — Strategy & Automation

Crossriverbank; Fort Lee (NJ); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Cross River seeks a VP of Identity & Access Management to design and lead a modern IAM program across cloud, on-premises, and SaaS environments. This strategic leader will partner with Engineering, Compliance, and Audit to advance governance, automation, and risk-aligned controls.

You will oversee Joiner-Mover-Leaver automation, RBAC/ABAC, and privileged access governance, while driving SSO/MFA adoption and SOC 2, FFIEC, and PCI DSS readiness. Hybrid/on-site role in a regulated fintech setting.

Qualifications

• 10+ years in IAM, information security, or IT risk roles.
• 3+ years in people management or technical leadership.
• Hands-on IAM experience with platforms like SailPoint, Saviynt, Azure AD, CyberArk, Okta.
• Deep knowledge of JML workflows, RBAC/ABAC, SSO, MFA, and PAM principles.

Responsibilities

• Define and own the IAM vision, roadmap, and architecture with security, compliance, and business goals.
• Build, lead, and mentor a high-performing IAM team with a culture of collaboration and accountability.
• Champion secure IAM practices across units and collaborate with Engineering and Compliance.
• Oversee Joiner-Mover-Leaver processes and access workflows; enforce RBAC/ABAC and SSO across SaaS apps.
• Guide cloud identity strategies for Azure/AWS and SaaS vendors under centralized identity management.

Skills

IAM leadership

Strategic thinking

Strong communication

Security governance

Tools

SailPoint

Saviynt

Azure AD

CyberArk

Okta

PowerShell

Python

Job description

Cross River seeks a VP of Identity & Access Management to design and lead a modern IAM program across cloud, on-premises, and SaaS environments. This strategic leader will partner with Engineering, Compliance, and Audit to advance governance, automation, and risk-aligned controls.

You will oversee Joiner-Mover-Leaver automation, RBAC/ABAC, and privileged access governance, while driving SSO/MFA adoption and SOC 2, FFIEC, and PCI DSS readiness. Hybrid/on-site role in a regulated fintech setting.