IAM Access Control Senior Group Manager

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you’ll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won’t receive a response).

Regular or Temporary:

Regular

Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

This role is responsible for developing, implementing, and maintaining a Role Based Access Control (RBAC) strategy to be executed across the Bank’s applications and IT systems. The primary responsibility will be to build and apply a security model that combines a working understanding of business operations for applications, IT systems, and job functions to define birthright roles. The incumbent will need to be versed in industry best practices such as NIST and FFIEC to ensure proper risk controls are implemented across these roles. Responsibilities will include a subset of IAM life-cycle functions such as: a) defining core, hierarchical and constrained access controls b) role assignments and permission authorizations c) role governance d) role compliance and e) separation of duties enforcement.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Following is a summary of the essential functions for this job.  Other duties may be performed, both major and minor, which are not mentioned below.  Specific activities may change from time to time.  

1. Create and maintain an access management strategy, roadmap and control framework that includes appropriate control models (e.g., RBAC, PBAC, ABAC) and is in alignment with NIST and FFIEC.

2. Work with Application Technical Managers (ATM) to understand roles and entitlements within the application landscape to define role-based permissions.

3. Design access models (i.e., how access is structured), access roles and RBAC based on business needs and the access management strategy, roadmap, and control framework.

4. Manage a team of 5 to 10 direct report teammates and contract workers who execute strategic and complex work designing role-based access controls

5. Design, implement, and govern security controls for access to applications and IT systems.

6. Partner with role owners and appropriate subject matter experts to design effective segregation of duties (SoD) policies.

7. Ensure appropriate SoD and least privileged access controls are effective accross all IT assets.

8. Proactively engage with HR, D-CIO organizations, and stakeholders to understand their access needs.

9. Provide consulting to standup new access based on requests from lines of business (partners with other teams to implement).

10. Oversee managed services for:

• Access analysis and reporting
• Role mining and role “fit” analysis
• Execution of RBAC and access role life cycle (e.g., creation, configuration, and deletion in IGA)
• Configuration of SoD policies and rules in Truist’s IAM system
• Resolution of SoD conflicts
• Maintain role titles, descriptions, and other attributes
• Administration of access management delegates
• Behavioral analytics based on activity and authorization logs from Truist’s SIEM
• KPIs to measure performance against the service level agreement (SLA) for execution of the role lifecycle processes

11. Create and maintain process documentation for the role lifecycle processes.

12. Design and implement role assignments, role authorization and permission authorizations across applications following the principle of least privilege.

13. Develop and implement static and dynamic separation of duty rules and policies.

14. Establish a governance structure to maintain role policies and role re-evaluation guidelines.

15. Perform hiring, coaching, terminations, disciplinary action, and performance reviews to enable a high-performing team.

16. Oversee strategic and operational plans in support of business objectives; develop cross-departmental business cases to solve problems by making technical and financial tradeoffs.

17. Improve the user experience for requesting and obtaining access necessary for staff to perform their job functions.

18. Proactively engage with stakeholders to make them aware and willing to adopt our solutions, which includes managing up, out, and down to avoid surprises and position our solutions to be successful.

QUALIFICATIONS

Required Qualifications:

The requirements listed below are representative of the knowledge, skill and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1. Bachelor’s degree and eight years of experience in systems engineering or administration or an equivalent combination of education and work experience
2. Deep specialized and/or broad functional knowledge in applied enterprise information security technologies including but not limited to firewalls, intrusion detection/prevention systems, network operating systems, identity management, database activity monitoring, encryption, content filtering, and Mainframe security
3. Previous experience in leading complex IT projects

Preferred Qualifications:

1. Significant knowledge and demonstrated experience in the following:

• Leading a team of senior and less experienced cybersecurity professionals

• Developing and implementing an access management strategy

• Leading implementation and transition to RBAC, ABAC and PBAC access control models

• Advanced role-mining and role engineering techniques

• Implementation of effective segregation of duties (SOD) controls

• Designing and executing security controls

2. Deep expertise of Human Capital job profiles, titles, and roles to create and align birthright rules.

3. Bachelor’s degree or equivalent

4. 10 years’ technical experience working in the identity and access management control function

5. 10 years’ experience as a manager leading diverse teams, such as teammates, contract workers, onshore, offshore resources, and/or managed services 

6. 10 years managing simple and complex role permissions Experience managing third party managed service provider contracts

7. 5 years’ experience and expert-level technical knowledge of product knowledge and processes for specific IAM areas (e.g., Active Directory, RACF, Azure, AWS, Idaptive, Centrify, CyberArk, SailPoint, Oracle OIM, Persistent Ignite)

8. 5 years’ technical experience working for a top 10 US bank

9. 10 years’ experience managing the remediation of regulatory matters and internal findings

10. 10 years’ experience in strategic planning and applying industry best practices to operations (NIST, FFIEC)

11. Excellent communication, collaboration, and organizational skills

12. Demonstrated leadership abilities, high accountability, drive, and initiative

OTHER JOB REQUIREMENTS / WORKING CONDITIONS

Sitting
Constantly (More than 50% of the time)
Visual / Audio / Speaking
Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.
Manual Dexterity / Keyboarding 
Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers.
Availability
Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need.
Travel
Minimal and up to 10%

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist supports a diverse workforce and is an Equal Opportunity Employer that does not discriminate against individuals on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the LawPay Transparency Nondiscrimination ProvisionE-Verify