Workforce IAM Governance Team Lead (IAM)

Location: Buffalo, New York, United States; four days onsite at Seneca One and one day per week from home.

Salary: $116,400–$194,000 annual USD

Company

A banking organization focused on protecting digital resources through cybersecurity, risk management, and regulatory compliance.

What you will do

• Lead workforce IAM governance across SailPoint, Azure AD/Entra ID, CyberArk, PAM, and related platforms.
• Define access governance models covering birthright access, role models, entitlement management, certifications, RBAC, conditional access, and privileged roles.
• Establish scalable guardrails for cloud-native, hybrid, and federated identity access models.
• Advise on complex access decisions, risk exceptions, enterprise initiatives, and emerging risks such as non-human identities, AI/service accounts, privilege sprawl, and over-entitlement.
• Drive IAM roadmaps, tooling strategy, modernization, control-gap remediation, audit responses, reporting, and performance measurement.
• Lead and develop a cybersecurity team of typically 5–10 individual contributors while partnering with senior managers, technology teams, risk, and internal audit.

Requirements

• Bachelor’s degree and at least 5 years of relevant experience, or an equivalent combination of education and experience including at least 4 years in the relevant cybersecurity or technology area.
• Advanced knowledge of IAM cybersecurity principles and compliance requirements.
• Experience leading teams and managing cybersecurity functions with limited direction.
• Ability to develop policies, internal controls, remediation plans, performance metrics, and audit or regulatory responses.
• Ability to work four days onsite in Buffalo, New York and one day remotely each week.

Nice to have

• At least 2 years of managerial experience.
• Experience training and mentoring cybersecurity individual contributors.
• Subject matter expertise in SailPoint, Azure AD/Entra ID, CyberArk, and PAM solutions.
• Experience with cloud identity strategy, RBAC, conditional access, IAM roadmapping, tooling strategy, and modernization.

Culture & Benefits

• Hybrid schedule with four onsite days and one work-from-home day per week.
• Opportunity to shape cybersecurity governance, resiliency, and long-term IAM modernization.
• Collaboration with Cybersecurity leadership, technology stakeholders, First Line Risk, and Internal Audit.
• Work within established risk appetite, regulatory standards, and internal control frameworks.