Staff Security Risk & Compliance Program Manager - Access Management

Description

We're not just building better tech. We're rewriting how data moves and what the world can do with it. With Confluent, data doesn't sit still. Our platform puts information in motion, streaming in near real-time so companies can react faster, build smarter, and deliver experiences as dynamic as the world around them.

It takes a certain kind of person to join this team. Those who ask hard questions, give honest feedback, and show up for each other. No egos, no solo acts. Just smart, curious humans pushing toward something bigger, together.

One Confluent. One Team. One Data Streaming Platform.

About the Role:

We are seeking a highly motivated and experienced Staff Security Risk & Compliance Program Manager - Access Management to join our Trust & Security team. This senior role owns Confluents internal access management program and leads its evolution toward machine and workload identity - service-to-service (S2S) authentication, non-human identity (NHI), and access controls for AI agents - as the next frontier of least-privilege security for the Confluent Cloud platform.

You will be the horizontal owner of how Confluent governs access: the Access Management Standard, access metrics, and the executive reporting cadence. As access operations are distributed across partner functions, you will hold the policy, risk, and measurement line so Confluent maintains one coherent access posture rather than fragmented silos.

What You Will Do:

• Strategy and Leadership: Own the strategic direction and roadmap for Confluents internal access management program, with machine and workload identity as the durable center of gravity. Drive the programs maturity model from control-building toward sustained governance and least-privilege outcomes.

• Machine & Workload Identity: Lead the program to enforce service-to-service (S2S) authentication across Trust & Security-owned surfaces, taking ownership of the enforcement hand-off from the identity engineering team. Formalize non-human identity (NHI) - service accounts, keys, and workload credentials - from pilot into a funded, governed program. Stand up access controls for AI agents as agentic workloads acquire production access.

• Access Governance & Standards: Own the Access Management Standard and the policies that operationalize least privilege, separation of duties, and periodic access review across human and machine access. Ensure the standard keeps pace with the evolving access surface and remains audit-ready.

• Metrics, Reporting & Governance Cadence: Own access metrics and reporting (e.g., JIT/unilateral-access volume, broad-privilege usage, prod-access reduction). Define and track program OKRs and run the monthly execution and executive-review cadence, articulating risk posture and progress to senior leadership.

• Cross-Functional Execution & Transitions: Drive cross-functional delivery with engineering, platform, and identity teams without direct authority.

• Integration with GRC and Partner Functions: Ensure the access management program is tightly integrated with adjacent GRC domains and partner teams (Insider Threat, IT/Identity, Detection & Response, and engineering owners), with clear RACI across governance and operations.

What You Will Bring:

• Experience: 8+ years in security program management, identity & access management, or a closely related security discipline, with at least 3 years running an enterprise- or platform-scale access program in a technology company.

• Technical Skills:

• Deep expertise in identity and access management concepts: least privilege, separation of duties, RBAC/ABAC, just-in-time (JIT) and privileged access management (PAM), and access review/certification.

• Working knowledge of machine and workload identity - service-to-service authentication, non-human identity, service accounts, secrets/key management, and emerging AI-agent access patterns.

• Strong security engineering fundamentals across cloud infrastructure security controls in GCP, AWS, and/or Azure, including Kubernetes and cloud control-plane access models.

• Familiarity with identity platforms and access tooling (e.g., Okta, JIT/access-orchestration tooling) and how access controls are enforced in production.

• Tooling and Automation: Experience integrating access processes, controls, or findings into GRC and access-orchestration platforms, and a bias toward automating access decisions over manual operations.

• Program Management Skills:

• Strong project management and organizational skills.

• Exceptional analytical and problem-solving skills, with a data-driven approach to decision-making.

• Experience running long-term, complex security programs that deliver iterative, measurable risk reduction.

• Communication and Collaboration Skills:

• Excellent written and verbal communication, with the ability to influence and lead without direct authority across engineering and security teams.

• Ability to articulate complex technical concepts and program status to executive-level audiences and technical teams alike.

Ready to build whats next? Let's get in motion.

Come As You Are

Belonging isn't a perk here. It's the baseline. We work across time zones and backgrounds, knowing the best ideas come from different perspectives. And we make space for everyone to lead, grow, and challenge what's possible.

We're proud to be an equal opportunity workplace. Employment decisions are based on job-related criteria, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other classification protected by law.

Privacy Statement

Confluent is an IBM subsidiary which has been acquired by IBM and will be integrated into the IBM organization. By proceeding with this application, you understand that Confluent will share your personal information with other IBM affiliates involved in your recruitment process, wherever these are located. More Information on how IBM protects your personal information, including the safeguards in case of cross-border data transfer, are available here.

Apply

Return to All Jobs

Share This Job

Global Benefits to Help You Do Your Best Work

Remote-First Work

Robust Insurance Benefits

Flexible Time Away

The Best Teammates

Experience Ambassadors

Open and Honest Culture

Well-Being and Growth

Leadership Principles Define How we Act

Our Leadership Principles outline a shared set of expectations for how we think and behave at Confluent. They're an extension of our company values which we all live each day. You can learn more here.

Confluent is Remote-First

We care about how you work, not where. Confluent is built for flexibility, so we encourage you to apply from anywhere. But we also know that trust and purpose are built face-to-face. That's why we combine remote freedom with in-person onboarding to jumpstart your journey. It's the best of both worlds: the autonomy you want with the community you need. Read why we prioritize in-person onboarding

Compensation

$222.1K - $261K • Offers Equity

At Confluent, we are committed to providing competitive pay and benefits that are in line with industry standards. We analyze and carefully consider several factors when determining compensation, including work history, education, professional experience, and location. The actual pay may vary depending on your skills, qualifications, experience, and work location. In addition, Confluent offers a wide range of employee benefits. To learn more about our benefits click here.