TITLE: MGR - INFORMATION SECURITY - CUSTOMER IDENTITY AND ACCESS MANAGEMENT (CIAM)
STATUS: EXMEPT
REPORTS TO: DIRECTOR - INFORMATION SECURITY
DEPARTMENT: IT - INFORMATION SECURITY
JOB CODE: 11610
PAY RANGE: $137,300.00 - $155,000.00 ANNUALLY
GENERAL DESCRIPTION:
The CIAM Manager leads the Credit Unions Customer Identity and Access Management (CIAM) initiatives. The Manager will be responsible for designing, implementing, and managing CIAM solutions to ensure secure and seamless member experiences across our digital platforms. The manager leads the team and vendor partners responsible for managing user identities, access controls, and authentication processes.
The ideal candidate will have a strong background in identity and access management, cybersecurity, and project management, with a focus on delivering solutions that meet business objectives while maintaining compliance with regulatory standards.
TASKS, DUTIES, FUNCTIONS:
1. Experience with CIAM Solutions: Demonstrated proficiency in implementing and managing customer identity access management solutions, preferably with hands-on experience in leading CIAM platforms such as Okta, Auth0, or ForgeRock.
2. Identity and Access Management (IAM) Expertise: Strong understanding of IAM principles, including authentication, authorization, federation, and user lifecycle management, with the ability to translate business requirements into effective IAM solutions.
3. Customer-Focused Mindset: Proven track record of understanding customer needs and delivering solutions that enhance user experience while maintaining security and compliance standards.
4. Technical Proficiency: Deep understanding of identity protocols and standards such as OAuth, OpenID Connect, SAML, LDAP, and SCIM, along with experience in integrating CIAM solutions with various applications and systems.
5. Security and Compliance Knowledge: Thorough understanding of security best practices, privacy regulations (such as GDPR, CCPA), and compliance requirements related to customer data protection, with the ability to ensure CIAM solutions meet regulatory standards.
6. Project Management Skills: Experience leading CIAM implementation projects from initiation to completion, including requirements gathering, solution design, implementation, testing, and deployment, while managing timelines, resources, and stakeholders effectively.
7. Communication and Collaboration: Excellent communication skills with the ability to interact confidently with cross-functional teams, stakeholders, and senior management to articulate CIAM strategies, address concerns, and drive consensus on decisions.
8. Problem-Solving Abilities: Strong analytical and troubleshooting skills to identify and resolve complex CIAM issues, proactively mitigate risks, and optimize CIAM processes for scalability and efficiency.
9. Team Leadership: Demonstrated leadership capabilities in mentoring and guiding a team of CIAM professionals, fostering a collaborative and innovative work environment, and driving continuous improvement through knowledge sharing and skill development.
10. Continuous Learning Orientation: Commitment to staying updated on emerging trends, technologies, and best practices in CIAM, security, and identity management domains through self-study, training, and participation in relevant industry forums and events.
11. Develop and maintain an understanding of the pertinent regulatory requirements and risks inherent to job responsibilities, establish, and maintain control activities that mitigate those risks consistent with the Credit Union’s risk appetite, and ensure operational integrity and compliance with applicable regulations.
PHYSICAL SKILLS, ABILITIES, AND EXERTION UTILIZED IN THE PERFORMANCE OF THESE TASKS:
1. Effective oral and written communication skills required to assure the ongoing security and protection of Golden 1’s Information Technology and information assets.
2. Must possess sufficient manual dexterity to skillfully operate an on-line computer terminal and other standard office equipment, such as financial calculators, personal computer, facsimile machine and telephone.
ORGANIZATIONAL CONTACTS & RELATIONSHIPS:
1. INTERNAL: All levels of staff and management.
2. EXTERNAL: Volunteers, external auditors, professional and community organizations, and law enforcement agencies.
QUALIFICATIONS:
Bachelor's Degree: A bachelor's degree in computer science, information technology, cybersecurity, or a related field is preferred.
CIAM Certification: preferred Certification in CIAM or related areas such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Identity and Access Manager (CIAM) demonstrates expertise in the field.
Experience: At least 5-7 years of experience in identity and access management, Information Technology, with a focus on customer identity management. 3 years direct supervisory experience.
Technical Skills: Proficiency in identity protocols and standards (OAuth, OpenID Connect, SAML, LDAP, SCIM), CIAM platforms (Okta, Auth0, ForgeRock), and integration technologies (APIs, SDKs).
Security Knowledge: Deep understanding of cybersecurity principles, including authentication methods, access control mechanisms, encryption, and secure coding practices.
Compliance Expertise: Knowledge of privacy regulations (e.g., GDPR, CCPA) and industry standards (e.g., ISO 27001, NIST) related to customer data protection and compliance requirements.
Project Management Experience: Proven experience leading CIAM implementation projects, including requirements analysis, solution design, implementation, testing, and deployment, with strong project management skills.
Leadership Abilities: Demonstrated leadership skills in managing teams, fostering a collaborative work environment, and driving initiatives to meet organizational goals.
Communication Skills: Excellent verbal and written communication skills, with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders. Familiar with the suite of Office products in relation to presenting ideas and documenting processes.
Analytical Thinking: Strong analytical and problem-solving skills, with the ability to analyze complex issues, identify root causes, and propose effective solutions.
Customer Focus: A customer-centric mindset with a focus on delivering solutions that enhance user experience while ensuring security and compliance.
Adaptability: Ability to adapt to changing business requirements, technology landscapes, and security threats, with a continuous learning mindset to stay updated on industry trends and best practices.
PHYSICAL REQUIREMENTS:
1. Prolonged sitting throughout the workday with occasional mobility required.
2. Corrected vision within the normal range.
3. Hearing within normal range. A device to enhance hearing will be provided if needed.
4. Occasional movements throughout the department daily to interact with staff, accomplish tasks, etc.
5. Unusually long work hours may be required to accomplish tasks.
LICENSES/CERTIFICATIONS:Information Security Certification preferred:
1. CISSP (Certified Information Systems Security Professional)
2. CISM (Certified Information Security Manager)
3. Certified Internal Systems Auditor (CISA)
REV. 03/29/2024