Manager I-IAM Access Reviews

Overview

Serves as manager, provider, and subject matter expert (SME) of the Access Reviews team in Identity & Access Management (IAM) Engagement Services and its functions. Provides analysis and leadership as the team works with business stakeholders, technical stakeholders and other analysts supporting IAM controls, including:
•   Ongoing access attestations and audits
•   Operational improvements
•   Transformational initiatives for IAM services
Understands, supports, and creates IAM controls and governance to strengthen the IAM organization. Partners with business and technical stakeholders to understand business needs and drive solutions that reduce risk while providing best-in-class experience. Provides forward-looking industry perspective and is responsible for the full lifecycle process of the service including definition, execution, governance, and resources. Identifies and analyzes opportunities for new and improved processes, data, and technology, providing a clear picture of possible outcomes.
Operates with little to no supervision in a complex environment, managing a function with medium/high complexity and low/medium maturity. Provides experienced leadership to manage Identity & Access professionals and leaders, and is accountable for the performance and results of the team. Bases decisions on policies, resources, and business plan.

Responsibilities

Oversee IAM staff responsible for: 
•    Building Access Certification business operation processes and technological solutions to support:
- Privileged and Non-Privileged Application Access
- Privileged Infrastructure
- Platform, Hosting, and Database Access
- Role-Based Access
- Additional access types as needed for risk mitigation
•    Onboarding and integrating application and infrastructure technologies to standardized Access Certifications.
•    Operating Access Certification campaigns on a periodic basis according to audit, risk and controls requirements.
•    Maintaining records and evidence to support risk assessments and internal and external audits.
•    Ensuring all Access Certification processes, technologies, records, and evidence comply with standards and controls.
•    Helping stakeholders understand IAM capabilities and functions.
•    Translating business and operational needs from Workforce stakeholders to improve existing capabilities and define new IAM transformational capabilities.
•    Supporting business and technical stakeholders in transitioning to new IAM capabilities and services across various IAM domains to support streamlined Access Certifications, such as Access Management, Identity Lifecycle Management, Privileged Access Management, and Role-Based Access Management.
•    Providing complex analytical leadership with business stakeholders, technical stakeholders, and other analysts supporting significant transformational and operational initiatives for IAM services.
•    Ensuring IAM governance structures adhere to defined policies and standards, and that IAM core capabilities, IAM operations, business stakeholder usage, and application integrations follow governance structures.
•   Maintaining a continuous, strong security posture across all business and IAM stakeholders via ongoing, proactive reviews of account access and authorization
•   Designing short- and long-term improvements to ensure violations are remediated.
•   Develop plans and tracking for integration of business and infrastructure systems and platforms with IAM technologies.
•   Develop and define clear core work definitions, process flows, and operating models for the team.
•   Contribute to the overall strategy, planning, and implementation of the Identity & Access Management program.
•   Partner with business and IT teams to provide technical oversight of key programs and controls necessary to ensure the protection of data and information assets.
•   Be a change agent to help lead team from a Waterfall team to a Scaled Agile Framework (SAFe) team.
•   Guide and analyze benchmarking, trend analysis, and other input to drive continuous improvement and elevate service performance.
•   Bring external perspective and ideas from relevant sources.
•   Keep up with technology, industry best practices, government and policy impacts.
•   Partner with Enterprise Architects to determine and define the technical architecture required to implement and support the IAM service. 
•   Evaluate the performance and trends of assigned services to customers, including defined key performance indicators (KPIs) and service level agreements (SLAs); ensure that service levels are in line with SLAs and service level objectives (SLOs).
•   Build and maintain relationships with team members, management, key stakeholders, and external contacts (https://e.g., vendors).
•   Ensure effective and efficient allocation of staff resources to support projects and initiatives by defining scope and duration of projects.
•   Build organizational capability by strengthening and adding new capabilities, technical skills, and competencies; eliminate low-value activity to prioritize long-range goals.
•   Perform benchmarking and trend analysis to incorporate continuous improvement and defined enhancements into IAM service functions.
•   Partner with ISD Resource and Vendor Managers to ensure that the right resources (https://e.g., skills, competencies, team size) are accessible.
•   Provide constructive and actionable feedback to resources, Resource Managers, and Vendor Managers to ensure expected performance and satisfy service SLAs.
•   Ensure compliance with Navy Federal’s ISD standards, practices, and processes.
•   Perform supervisory/managerial duties:
•   Ensure adequate, skilled staffing; select employees.
•   Establish performance goals and priorities.
•   Prepare, conduct, and review performance appraisals.
•   Develop, mentor, and counsel staff.
•   Provide input and prepare budget requirements for Annual Financial Plan (AFP).
•   Ensure section and branch goals and objectives align with division and department strategy.
•   Perform other related duties as assigned.

Qualifications

•   Bachelor’s Degree in Information Technology, Computer Science, or related field, or the equivalent combination of education, training, and experience.
•   Significant experience working in a large IT organization with responsibility for overseeing business and technology transformations.
•   3-5+ years of IAM experience, specifically managing complex IAM solutions for business and technology stakeholders.
•   Extensive experience in IT solution creation and delivery with increased business intelligence.
•   Extensive experience working in cross-functional, multi-dimensional teams and projects and translating business requirements into technical solutions.
•   Extensive experience leading, guiding, and mentoring others.
•   Significant experience with Identity & Access management processes such as identity governance and administration, identity authentication, access authorization, and privileged access management.
•   Significant experience with information security controls and governance processes.
•   Significant experience with vendors and management of vendor contracts and statements of work.
•   Significant experience working with all levels of staff, management, stakeholders, and vendors.
•   Significant experience supervising and leading professional IT staff.
•   Experience leading, guiding and coaching professional staff.
•   Experience in resource allocation and management.
•   Experience working with business and technical teams, especially in IAM and Role-Based Access Controls (RBAC) contexts.
•   Experience managing access certifications and/or access provisioning. 
•   Expert skill maintaining accuracy and attention to detail while meeting deadlines.
•   Expert skill communicating with all levels within an organization and acting as a trusted liaison between IT delivery teams and front-office business units.
•   Expert skill exercising initiative and using good judgment to make sound decisions.
•   Advanced knowledge of Systems Development Lifecycle (SDLC) and Scaled Agile Framework (SAFe).
•   Advanced verbal and written communication skills, including communicating a vision and plan to team members and stakeholders.
•   Advanced research, analytical, and problem-solving skills.
•   Advanced organizational, planning and time management skills.
•   Effective skill in producing desired results and achieving goals and objectives.
•   Effective skill in presenting findings, conclusions, alternatives, and information clearly and concisely to senior leaders and business stakeholders.
•   Effective skill in relationship building, negotiation, and facilitation. 
•   Ability to delegate and assign work while both maximizing productivity and providing opportunities for team member growth.
•   Ability to develop strong relationships with business and technology stakeholders and work well in a high-pressure, dynamic environment.
•   Ability to manage multiple initiatives and negotiate competing priorities and stakeholder dependencies. 
•   Readiness to dig into details and support the team in high-pressure situations.
•   Courageous communication—willingness to voice concerns and recommend different approaches.
•   Leadership or management experience in an organizational initiative to move to role-based access, or to transition from legacy systems to strategic systems.
•   Focus on establishing solid foundations and building upon them.
•   Familiarity with risk management, controls, and audit requirements.
•   Comfort with explaining and representing processes.
•   Confidence in dealing with external auditors.
•   Focus on delivering service to users or clients.
•   Sense of urgency and ability to flex to changing requirements. 

Desired Qualifications 

•   Specific experience leading the transition of business and operational applications to new IAM governance processes.
•   Financial Services background with specific knowledge of business processes and applications.
•   Working hands-on familiarity with major IAM tools (https://e.g., Saviynt, SailPoint, ForgeRock, PlainID, OIM, Ping, Okta) and internal workflow software (https://e.g., ServiceNow, Workday, Salesforce).
•   Mainframe experience (RACF/ACF2).
•   Network infrastructure security experience (Firemon).
•   Experience with Saviynt identity governance and administration platform.

Hours: Monday - Friday, 8:00AM - 4:30PM

Location: 820 Follin Lane, Vienna, VA 22180 | 5550 Heritage Oaks Dr. Pensacola, FL 32526 | 141 Security Dr. Winchester, VA 22602

Navy Federal is now hybrid! Our standard enterprise requirement for a hybrid schedule is to report on-site 4-16 days each month. The number of days reporting on-site will ultimately be determined by the employee's leadership and business unit needs. You will learn more throughout the hiring and on boarding process.

Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume.

About Us

You have goals, dreams, hobbies, and things you're passionate about—what's important to you is important to us. We're looking for people who not only want to do meaningful, challenging work, keep their skills sharp and move ahead, but who also take time for the things that matter to them—friends, family, and passions. And we're looking for team members who are passionate about our mission—making a difference in military members' and their families' lives. Together, we can make it happen. Don't take our word for it:

• Military Times 2022 Best for Vets Employers

• WayUp Top 100 Internship Programs

• Forbes® 2022 The Best Employers for New Grads

• Fortune Best Workplaces for Women

• Fortune 100 Best Companies to Work For®

• Computerworld® Best Places to Work in IT

• Ripplematch Campus Forward Award - Excellence in Early Career Hiring

• Fortune Best Place to Work for Financial and Insurance Services

Equal Employment Opportunity: Navy Federal values, celebrates, and enacts diversity in the workplace. Navy Federal takes affirmative action to employ and advance in employment qualified individuals with disabilities, disabled veterans, Armed Forces service medal veterans, recently separated veterans, and other protected veterans. EOE/AA/M/F/Veteran/Disability EOE/AA/M/F/Veteran/Disability

Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position

Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.