Lead - Identity & Access Management
Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!
What you will be doing
The Lead Analyst, Information Security will deliver and manage large and complex Identity and Access Management initiatives across the business with the goals of improving efficiency, increasing security posture, and supporting aggressive growth.
The Lead Analyst, Information Security will be expected to work with the business to translate IAM functional requirements into technical designs within SailPoint IdentityIQ and other IAM technologies.
PRIMARY DUTIES AND RESPONSIBILITIES:
- Establish standards, driving designs and implementation of appropriate identity and access management processes and controls which help improve operations and lower risk.
- Drive the design, implementation and management of an Identity and Access Management Services which includes Identity Life Cycle Management, Access Management (SSO, federation, multi-factor), Role and Rights Management, Entitlement Review and Attestation (Audit & Assurance) and Identity & Access Analytics.
- Understand a variety of IAM-related product suites and tools in order to make critical operational and strategic decisions. Example products include: SailPoint IIQ, SailPoint Predictive Identity (AI-Driven Identity Security), SailPoint IdentityNow, SAP Customer Data Cloud (Gigya), Ping Identity, Quest Change Auditor, ADFS, Active Directory, Azure AD, PowerShell scripts, Avatier, etc.
- Directly partner with the enterprise Finance, Legal, Audit and Compliance executives to support Internal and External Audits relating to IAM (SOX, COBIT, IT Controls)
- Lead the development and implementation of prudent enterprise security standards, guidelines and procedures to protect the integrity, availability and privacy of all corporate information assets.
- Working with ISO Risk Organization, support the Business Unit and IT executives through the process of prioritizing security initiatives and spending based on relevant business risk and regulatory compliance issues, financial implications, and alignment with the corporate strategic plan.
- Ensures Identity and Access Management Services follows appropriate policies, procedures, operational considerations, IT change control, and IT risk and compliance management programs These efforts include (but are not limited to): Information Security Governance processes, Policies & Procedures, Audits, Metrics, and reporting in direct alignment with contractual, regulatory and compliance requirements.
- Support Business Unit and IT executives through the process of prioritizing security initiatives and spending based on relevant business risk and regulatory compliance issues, financial implications, and alignment with the corporate strategic plan.
- Manage, develop and mentor teams of Identity and Access Management professionals as well as contractors, vendors and services providers.
- Support strategic and tactical security, risk mitigation and regulatory compliance guidance for all IT projects, including the evaluation of enterprise policies, processes, operating procedures and governance controls.
- In alignment with the Company's growth and direction, assists in managing the development of budgets, controls and measurements to monitor progress.
- Makes recommendations for succession planning.
- Performs related duties as assigned.
What your background should look like
EXPERIENCE AND EDUCATIONAL REQUIREMENTS:
- Bachelor’s Degree in Information Technology, Information Security and Assurance, Computer Science, Cyber Security, Business Analytics or other related field or equivalent work experience.
- Typically requires 7-10 years of combined IT and security work experience with a broad range of exposure to Identity and Access Management functions and over 5 years’ experience designing and deploying Identity and Access Management solutions at the enterprise level.
- Experience leading technical teams in a large and complex environment to deliver related capabilities and services.
- Demonstrated successful implementation of security control frameworks and standards such as ISO 27001, ISO 17799, COBIT, ITIL, NIST and PCI.
- Certification in Information Security relevant areas such as Audit (CISA), Security Management (CISM), Security Professional (CISSP) and/or equivalent business experience in a matrix Organization required.
MINIMUM SKILLS, KNOWLEDGE AND ABILITY REQUIREMENTS:
- Demonstrated ability and willingness to collaborate with others to insure consistent and high-quality results.
- High level of personal integrity with the ability to professionally handle highly sensitive and confidential situations with Executives, Customers, and 3rd parties.
- Ability to easily defuse critical situations and manage escalations appropriately.
- Ability to communicate effectively both orally and in writing; ability to communicate with customers, associates, and management in a cross functional matrix organization; solid teamwork and interpersonal skills.
- Ability to establish solid relationships with vendors in support of initiatives; ability to negotiate and manage outside vendors against deliverables.
- Solid project management skills including the ability to effectively deploy resources and manage multiple projects of various diverse scope in a matrix and cross-functional environment.
- Solid knowledge of information security principles and practices
- Working knowledge of network solutions and systems
- Excellent track record communicating, managing complex projects and influencing others, in a diversified and international matrix organization. Adept at proposing, implementing, and managing change while prepared to question the “Status Quo”
- Ability to deal with ambiguity in a very dynamic and high speed and complex business environment.
What we offer:
- Competitive Salary and Excellent company benefits
- An unique opportunity to work for a global organisation and make a difference
What Cencora offers
We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members’ ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave.
To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more.
For details, visit https://www.virtualfairhub.com/amerisourcebergen
Affiliated CompaniesAffiliated Companies: AmerisourceBergen Services Corporation
Equal Employment Opportunity
Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.
The company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.