Director Information Security & Risk Management

Role : Director Information Security & Risk Management

Location : Pittsburgh or Harrisburg, PA (3 days hybrid)

Must have!! This Director-level role requires someone to manage a team of 75 employees, including 6 direct reports, focusing on Identity and Access Management (IAM) functional responsibilities.

We need a candidate with extensive experience, particularly within the preferred skills outlined in the job summary, including both general security and specialized IAM knowledge. Ideally, they will have a background in leading IAM in an organization of comparable or greater size.

The successful candidate will demonstrate team leadership skills and possess the functional understanding to effectively guide their IAM teams. This includes identifying, evaluating, and implementing new commercial IAM tools and third-party technologies.

Responsibilities also include:

• Overseeing quarterly access reviews (Fiber ARC).
• Managing Business-as-Usual (BAU) tasks for existing IAM tools and services, including architectures.
• Knowledge of Oracle Access Manager (OAM).

Healthcare experience is a plus, but strong leadership experience within a highly regulated industry (e.g., banking, healthcare) is more critical.

• Strategic Leadership
  • Define and drive the IAM vision, strategy, and roadmap aligned with enterprise security goals
  • Lead cross-functional initiatives to improve identity governance and access controls
  • Influence executive stakeholders and communicate IAM priorities across the organization
• Technical Expertise
  • Understanding of IAM technologies: SSO, MFA, PAM, IGA, directory services, and federation protocols (e.g., SAML, OAuth, OpenID Connect)
  • Experience with IAM platforms (e.g., SailPoint, Azure AD, CyberArk, OAM, RACF)
  • Knowledge of cloud IAM (GCP) and hybrid environments
  • Familiarity with regulatory frameworks (e.g., SOX, HIPAA, GDPR, NIST, ISO 27001)
• Operational Oversight
  • Oversee provisioning/deprovisioning processes, access reviews, and role-based access controls (RBAC)
  • Ensure timely resolution of IAM-related incidents and service requests
  • Monitor and report on IAM metrics, compliance, and audit readiness
• Team & Vendor Management
  • Build and lead a high-performing IAM team (architects, engineers, analysts)
  • Manage vendor relationships and evaluate third-party IAM solutions
  • Develop training and awareness programs for IAM best practices
• Risk & Compliance
  • Identify and mitigate identity-related risks across systems and applications
  • Ensure alignment with internal policies and external compliance requirements
  • Support internal and external audits with evidence and documentation
• Integration & Architecture
  • Collaborate with enterprise architects to ensure IAM fits into broader IT and security architecture
  • Lead integration of IAM with HR systems, ERP, CRM, and other business platforms
  • Drive automation and scalability of IAM processes
• Innovation & Continuous Improvement
  • Stay current with emerging IAM trends, threats, and technologies (AI, etc)
  • Champion innovation in identity lifecycle management and zero trust initiatives
  • Continuously assess and improve IAM maturity across the organization