Director, Identity Security

Job Summary: The Director of Identity is responsible for maturing the enterprise Identity and Access Management (IAM) program across strategy engineering operations architecture and emerging identity security capabilities. This role provides leadership for a global IAM function supporting a large-scale internal and external identity environment and is accountable for advancing identity governance privileged access authentication lifecycle management and secrets and cryptography capabilities in alignment with business risk and compliance requirements.

The role combines strategic direction operational accountability organizational leadership and program execution. The Director of Identity will lead mature identity services while driving transformation initiatives such as IAM governance maturation role-based access control PAM modernization passwordless authentication certificate lifecycle automation and enterprise secrets management.

What You Will Do:

Strategy Governance and Leadership

• Define and own the enterprise IAM strategy roadmap and operating model aligned to cybersecurity compliance and business objectives.

• Mature the IAM program through formal governance policies standards controls metrics and leadership reporting.

• Present IAM program status risks priorities and investment needs to security leadership and executive stakeholders.

• Lead prioritization decisions across operations platform engineering architecture and project-based identity initiatives.

• Establish and monitor KPIs service performance maturity goals and program outcomes.

IAM Program Delivery

• Lead delivery of enterprise IAM capabilities including identity lifecycle management joiner/mover/leaver processes access provisioning access requests access reviews privileged access authentication federation and directory services.

• Oversee transformation initiatives such as IGA expansion RBAC governance PAM modernization passwordless authentication and identity security posture improvements.

• Ensure IAM services meet operational expectations for reliability resilience scalability and user support.

• Partner with application infrastructure cloud HR audit and security teams to implement identity controls and integration patterns across the enterprise.

Compliance Risk and Control Effectiveness

• Ensure IAM processes and controls support audit regulatory and internal compliance requirements including SOX-related controls where applicable.

• Oversee audit readiness remediation activities control evidence and policy enforcement across identity-related processes.

• Align identity capabilities to recognized frameworks and standards such as NIST CSF 2.0 NIST 800-63 and enterprise security policies.

• Reduce identity-related risk by strengthening governance control automation privileged access protections and secrets management practices.

Architecture and Emerging Identity Security Capabilities

• Provide leadership across identity architecture platform standards and integration patterns for workforce privileged and customer identity environments.

• Lead the development of enterprise secrets and cryptography capabilities including certificate lifecycle management PKI modernization vault strategy and operational controls.

• Support modern identity approaches across hybrid and cloud environments including federation conditional access and non-human/service identity considerations.

• Drive decisions on tooling architectural direction and strategic vendor partnerships that improve security scalability and operational efficiency.

Organizational and People Leadership

• Lead and develop a distributed IAM organization consisting of managers architects engineers and operations personnel.

• Build organizational clarity across operations engineering architecture and new capability areas.

• Provide leadership in talent development succession planning coaching performance management and team engagement.

• Manage staffing strategy across full-time employees partners and contingent resources to meet delivery needs.

• Oversee third-party vendors and consulting partners supporting IAM programs and services.

Minimum Qualifications:

• Bachelors degree in Information Technology Information Security Computer Science Engineering or a related discipline; equivalent experience may be considered.

• 12 years of progressive experience in Identity and Access Management cybersecurity or security engineering.

• 5 years of leadership experience managing multi-team IAM functions at the Senior Manager or Director level.

• Demonstrated success leading enterprise IAM programs across strategy operations engineering governance and transformation initiatives.

• Experience owning IAM governance policy development audit response executive reporting and control maturity efforts.

• Experience building or standing up new security capabilities teams or services.

Technical and Functional Qualifications:

• Strong knowledge of Identity Governance and Administration platforms; Saviynt preferred. Experience with SailPoint or One Identity is also relevant.

• Strong knowledge of Privileged Access Management concepts and platforms; BeyondTrust preferred with CyberArk or Delinea also relevant.

• Experience with Microsoft identity services including Active Directory Entra ID B2C federation and conditional access.

• Knowledge of authentication and federation standards such as SAML OAuth 2.0 and OpenID Connect.

• Understanding of hybrid and cloud IAM patterns across Azure AWS and GCP environments.

• Knowledge of secrets management PKI certificate lifecycle management and key management technologies such as HashiCorp Vault or Azure Key Vault.

• Familiarity with IAM maturity frameworks security governance models and regulatory or control expectations.

Preferred Qualifications

• Experience in a Fortune 500 global manufacturing or industrial environment.

• Experience with SOX-related IAM controls and certification processes.

• Experience with ServiceNow-based access workflows and Workday-driven provisioning processes.

• Relevant certifications such as CISSP CISM or identity-platform specific certifications.

Leadership Competencies

• Strategic thinker with the ability to set direction and translate strategy into execution.

• Strong decision-maker who operates effectively in complex matrixed environments.

• Delivery-oriented leader with a strong focus on accountability outcomes and service quality.

• Effective communicator able to translate complex identity and security topics for executives audit stakeholders and technical teams.

• Strong collaborator with the ability to influence across cybersecurity infrastructure cloud HR audit and application teams.

• Proven people leader with the ability to coach talent build teams and develop future leaders.

Additional Information

The role may require coordination across global teams including off-hours support for key initiatives escalations or major incidents.

Benefits

Ecolab strives to provide comprehensive and market-competitive benefits to meet the needs of our associates and their families.Click here to see our benefits.

If you are viewing this posting on a site other than our Ecolab Career website view our benefits at Customer Requirements Notice

To meet customer requirements and comply with local or state regulations applicants for certain customer-facing roles may need to:

- Undergo additional background screens and/or drug/alcohol testing for customer credentialing.

Americans with Disabilities Act (ADA)

Ecolab will provide reasonable accommodation (such as a qualified sign language interpreter or other personal assistance) with our application process upon request as required to comply with applicable laws. If you have a disability and require accommodation assistance in this application process please visit the Recruiting Support link in the footer of each page of our career website.