Service Owner – Identity & Access Management (IAM) The Service Owner – Identity & Access Management is accountable for the strategy, architecture alignment, governance, lifecycle management, and continuous improvement of enterprise identity and access management capabilities.
The role owns the IAM roadmap and service direction for identity governance, authentication, authorization, privileged access, and user identity lifecycle services. The Service Owner ensures identity capabilities enable secure access to enterprise applications, infrastructure, and business services while meeting cybersecurity, compliance, and regulatory requirements.
The role provides strategic leadership for IAM technology decisions, platform modernization, access governance improvements, and transformation initiatives, partnering with cybersecurity, infrastructure, application teams, HR, business stakeholders, and enterprise architecture teams.
Key Responsibilities- Define and maintain the IAM strategy, roadmap, and future-state capability model.
- Own the lifecycle management and continuous improvement of enterprise identity services and technologies.
- Evaluate IAM technologies, recommend improvements, and support platform modernization initiatives.
- Provide strategic ownership for identity and access capabilities, including:
- Identity Governance and Administration (IGA)
- Active Directory (AD) and directory services
- Multi-Factor Authentication (MFA)
- YubiKey and passwordless authentication capabilities
- Privileged Access Management (PAM)
- SAP Governance, Risk and Compliance (SAP GRC)
- Lead identity transformation initiatives, including end-user identity migration programs.
- Establish identity governance practices covering:
- Joiner, mover, leaver lifecycle management
- Access provisioning and deprovisioning
- Access reviews and certifications
- Role-based access controls
- Privileged access governance
- Partner with Enterprise Architecture, Cybersecurity Architecture, application owners, and infrastructure teams to ensure IAM solutions align with enterprise standards.
- Define IAM service management practices, including KPIs, SLAs, operational metrics, and maturity objectives.
- Manage IAM vendors, product roadmaps, licensing decisions, and service performance.
- Improve identity security posture through automation, standardization, and risk reduction initiatives.
- Ensure IAM capabilities support compliance requirements, audit expectations, and security policies.
Required Skills & Experience- 10+ years of experience in identity management, cybersecurity, or enterprise technology leadership.
- Experience owning enterprise IAM services and capabilities.
- Strong understanding of:
- Identity Governance and Administration (IGA)
- Privileged Access Management (PAM)
- Authentication and MFA solutions
- Directory services and Active Directory
- Access governance and lifecycle management
- SAP GRC or similar governance platforms
- Experience leading IAM transformation and migration initiatives.
- Experience managing vendors, enterprise platforms, and technology roadmaps.
- Strong stakeholder management and communication skills.
- Knowledge of security frameworks, compliance requirements, and identity security principles.