Manager, Cybersecurity, Privileged Access Management - Remote

About This Role

Managing the company's enterprise Privileged Access Management (PAM) program is the core of this role, protecting privileged accounts, credentials, secrets, and sessions across on-premises, cloud, and hybrid environments. You will own the PAM strategy and operating model, lead a team of analysts, and partner with various teams to reduce privileged access risk and support regulatory compliance. This position suits a leader with expertise in cybersecurity and identity management.

Responsibilities

• Own the enterprise PAM strategy, roadmap, engineering standards, and operating model aligned with Zero Trust and least-privilege principles
• Lead the deployment and operation of Cyber Ark, Beyond Trust, or Delinea across privileged account, credential, secrets, and session-management use cases
• Manage the privileged account lifecycle, including provisioning, deprovisioning, vaulting, rotation, and check-in/check-out for human and shared privileged accounts
• Implement privileged session monitoring and recording for high-risk administrative access, just-in-time and time-bound access, and endpoint privilege management to remove local administrator rights and enforce application control
• Design and govern break-glass access procedures with approval and audit controls
• Manage brokered, monitored, and time-limited third-party privileged access
• Partner with Infrastructure, Cloud, Security Operations, and Application teams to onboard privileged accounts and integrate PAM controls
• Support SOX, HIPAA, ISO 27001, and NIST Cybersecurity Framework requirements through reporting and audit evidence for privileged access controls
• Lead PAM analysts by setting priorities, engineering standards, performance expectations, and day-to-day operating practices
• Assess privileged access risks, resolve complex identity-security issues, and balance competing program priorities
• Translate PAM risks, control requirements, and implementation decisions into clear guidance for technical teams, business partners, and auditors

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Business Administration or a related discipline
• Minimum 8 years of experience in identity or cybersecurity, including a minimum 4 years of experience focused on privileged access management
• Hands-on experience deploying and operating Cyber Ark, Beyond Trust, or Delinea
• Experience with credential vaulting, privileged session management, just-in-time access, endpoint privilege management, and secrets management
• Experience securing privileged access across Microsoft Azure, Amazon Web Services, Google Cloud Platform, and on-premises environments
• People-leadership or team-lead experience managing analysts or engineers