Portfolio Director - Identity and Access Management

The Portfolio Director is a senior manager that leads an organization responsible for managing the entire life cycle of a portfolio of complex IT solutions.  A key focus is delivering and operating these IT solutions for the Church globally. This position requires a combination of the ability to establish and communicate strategic vision, exceptional customer focus, executive presence, and extensive experience leading technology-focused product and service delivery in a large global organization.  

This Portfolio Director will provide strategic leadership for enterprise identity and access management, delivering secure, scalable, and compliant access services that protect organizational assets while enabling users, applications, and emerging AI capabilities to operate effectively.

This individual works with divine guidance to provide or support technology that furthers the mission of the Church and reflects the eternal impact of the gospel.

We value early, mid and late-career candidates and encourage all applicants with the posted skills and abilities to apply. 

• Lead the strategy, governance, and delivery of identity and access management services.  Oversee authentication, authorization, identity governance, privileged access management, directory services, and access lifecycle processes while partnering with Information Security, and technology leaders to reduce risk, meet compliance requirements, and enable secure digital experiences.
• Partner closely with the Chief Information Security Officer to align the IAM portfolio roadmap with the enterprise security strategy, risk posture, and Zero Trust objectives 
• Own the strategy and delivery of the Church's global sign-in experience used by millions of members, employees, and volunteers, balancing strong security with a simple, welcoming, and accessible user experience 
• Ensure the identity platform meets high-availability, performance, and disaster recovery objectives appropriate for a mission-critical, 24/7 global service 
• Lead the portfolio's response to identity-related threats such as account takeover, credential stuffing, phishing, and fraud, in coordination with security operations 
• Ensure identity solutions comply with applicable global privacy and data protection regulations and Church data policies 
• Manage strategic relationships with IAM vendors and platform partners, including contract, licensing, and roadmap alignment 
• Promote and support portfolio, division, and department strategies and goals by collaborating cross-portfolio and cross-team  
• Demonstrate leadership and create a high performing workforce by creating a culture of fostering accountability, building capability, and positively influencing others  
• The employee must regularly manage the work of other employees (may include mixed workforce)  
• The employee is authorized, in partnership with HR, to hire or fire employees and recommends advancement, promotion or any other change of status of employees within their reporting line  

• Bachelor's degree or equivalent experience in related field.  
• 10 years combined senior level management responsibility within a technology organization including five years managing large successful tech rollout projects for a large organization  
• 5+ years of leadership experience in Identity and Access Management, cybersecurity, or a closely related discipline within a large enterprise. 
• Understanding of how identity serves as the control plane forsecurity, compliance, and business operations.
• Ability to balance security with user experience.
• Experience securing administrative accounts, privileged credentials, just-in-time access, privileged session controls, and least-privilege models.
• Strong understanding of insider risk and privilege escalation threats.
• Ability to align IAM capabilities with audit, regulatory, privacy, and security requirements.
• Experience leading compliance initiatives and responding toaudit findings.
• Demonstrated success developing IAM roadmaps, policies,standards, and target-state architectures.
• Ability to define how workforce, member/customer, partner,application, and machine identities are managed across theenterprise.
• Understanding of identity governance and administration (IGA), privileged access management (PAM), and role- or attribute-based access models. 
• Experience leading large-scale identity platforms such asMicrosoft Entra ID, Okta, SailPoint, CyberArk, Ping, ForgeRock,Oracle Identity, or similar ecosystems.
• Strong understanding of Zero Trust principles, least privilege,access governance, and identity-centric security models.
• Ability to partner effectively with security organizations while enabling business outcomes.
• Experience building and maintaining executive-level relationships. International experience is a plus.  
• Skilled at establishing vision and have the ability to translate that vision into business solutions.  
• Strong IT product and operational experience, including budgeting, resource management, and metrics.  
• Exceptional customer focus on customer service.  
• Excellent written and verbal communication skills with experience presenting to technical and non-technical audiences at an executive level.  
• High level of professionalism with strong interpersonal, conflict resolution and problem-solving skills.  
• Able to deliver results in an environment of competing priorities and changing project scope.  
• Experience with cost analysis, budgeting, performance management and metrics.  
• Strong technology implementation background, project management experience and proven product management experience  
• This job operates in a professional  environment  
• To successfully perform the essential functions of the job there may be physical requirements which need to be met such as sitting for long periods of time and using computer monitors/equipment  

Preferred: 

• Master's degree