What are the responsibilities and job description for the Information Security Manager, IAM position at At Home?
WORK LOCATION DETAILS
Work Location: Home Office - Coppell, TX
Work Schedule: Hybrid
- Onsite: Tuesdays, Wednesdays, Thursdays
- Work from Home: Mondays, Fridays
JOB SUMMARY
The Manager of Identity and Access Management (IAM) is responsible for the operations of the organization’s IAM program. Reporting to the Director of Information Security, this role is critical to protecting enterprise systems, data, applications, and digital identities while enabling secure business operations. The IAM Manager will oversee identity lifecycle management, privileged access management, authentication services, role-based access controls, and identity governance processes across cloud-hosted, on-premises, and hybrid environments. This leader will partner closely with other teams within Information Security and business stakeholders to ensure access is appropriately provisioned, monitored, and governed in alignment with regulatory and security requirements.
ESSENTIAL FUNCTIONS
Develop and execute the enterprise IAM roadmap aligned with Information Security and business objectives.
Lead and manage a growing team of analysts and engineers.
Establish IAM standards, policies, procedures, and operational metrics.
Drive continuous improvement initiatives for identity governance, authentication, and access controls.
Oversee user provisioning, deprovisioning, and access certification processes.
Ensure appropriate segregation of duties (SoD) and least-privilege access principles are enforced.
Implement and maintain role-based access control (RBAC) models.
Partner with HR and business leaders to automate identity lifecycle management.
Manage enterprise authentication platforms including SSO, MFA, and directory services.
Ensure secure integration of SaaS, cloud, and on-premises applications into IAM platforms.
Lead efforts to improve user experience while maintaining strong security controls.
Oversee privileged account governance and PAM solutions.
Implement controls for administrative access, session monitoring, credential vaulting, and privileged elevation.
Conduct periodic reviews of privileged access rights.
Ensure IAM controls support regulatory and compliance frameworks such as SOX, PCI-DSS, CCPA, TDPSA, and ISO 27001.
Support internal and external audits by providing IAM evidence and remediation plans.
Monitor IAM-related risks, incidents, and vulnerabilities.
Collaborate with Security Operations and Incident Response teams during investigations.
Define and monitor IAM KPIs, SLAs, and operational dashboards.
Lead IAM modernization projects.
Participate in disaster recovery and business continuity planning for IAM services.
QUALIFICATIONS
Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field.
5 years of experience in an information security role focusing on identity and access management, governance, or cybersecurity.
Experience implementing and managing SSO, MFA, RBAC, and PAM solutions.
Strong understanding of identity protocols including SAML, OAuth, OpenID Connect, LDAP, and SCIM.
Knowledge of security frameworks and regulatory requirements.
Excellent leadership, communication, and stakeholder management skills.
Professional certifications such as CISSP, CISM, CIAM, Security , or vendor-specific IAM certifications.
Experience supporting Zero Trust security initiatives and tooling.
Experience with automation and scripting using PowerShell, Python, or similar tools.
Strong written and verbal communication skills.