Director, Identity Governance and Workforce Protection

Location: Houston, TX, United States

Job Summary:

The Director, Identity Governance and Workforce Protection is responsible for the development and evolution of security strategy, both as it relates to the company's enterprise identity needs and to workforce access and protection services. As a subject matter expert, the Director will be expected to provide technical leadership and design guidance across the organization, define long-term roadmaps for identity security processes and technology, and ensure compliance with security and data protection requirements. The role leads approximately 20 FTEs across multiple teams responsible for identity governance, identity lifecycle management, security administration, and workforce identity protection. 

Duties and Responsibilities:

• Oversee identity security and workforce protection solutions and ensure they align with business requirements, compliance mandates, and security policies. 

• Approve and lead implementation of identity security technologies and processes. This may include interacting with vendor representatives and participating in security consultation during M&A activity. 

• Maintain the identity security posture of the organization through regular review and refresh of technology and infrastructure. Ensure new solutions align with business requirements, compliance mandates, and security policies. 

• Provide technical supervision and guidance to teams responsible for Identity Governance, Identity Lifecycle Management, Security Administration, and Workforce Identity Protection, including reviewing significant architecture and control changes to ensure they adhere to security requirements. 

• Serve as the security subject matter expert in delivering hands-on identity security expertise in support of the environment, including identity governance, Joiner-Mover-Leaver processes, access lifecycle automation, and workforce access support. 

• Serve as the security subject matter expert in utilizing current Cybersecurity technology disciplines and industry standards to ensure confidentiality, integrity, and availability of information assets, with particular focus on workforce identity and access controls. 

• Define and maintain technical requirements to facilitate the implementation of policies, standards, procedures, and identity security controls. 

• Provide strategic and technical oversight for key identity platforms and services, including SailPoint for identity governance and lifecycle management, Microsoft Entra ID and Conditional Access for workforce identity protection, and integrations supporting identity service intake and workflows. 

• Drive cross-functional roadmaps and stakeholder alignment for major identity initiatives, including application onboarding and automation, /SailPoint integration, and future migration of SailPoint capabilities to the SaaS platform. 

• Ensure operational services are effective and responsive, including workforce access support activities such as access-right changes, distribution list administration, and other identity-related requests. 

Education Preferred:

• Education (Bachelor’s Degree or above) related to Computer Science, Cybersecurity, Information Technology, or related fields

Experience Required:

• 10+ years of experience in Cybersecurity and/or information risk management, with strong working knowledge of identity and access management, identity governance, and security technologies. 

• Demonstrated leadership experience managing multiple technical or security teams and delivering enterprise-scale security services. 

• Strong working knowledge of Identity and Access Management (IAM) concepts, identity governance, access lifecycle management, and workforce identity protection. 

• Experience with SailPoint or comparable Identity Governance and Administration (IGA) platforms; SailPoint experience strongly preferred. 

• Experience with Microsoft Entra ID (Azure AD), Conditional Access, authentication, and workforce identity security controls. 

• Understanding of security design principles and architecture-level concepts. 

• Experience formulating and prioritizing security requirements according to the organization's risk appetite. 

• Understanding of relevant frameworks including NIST, ITIL, or ISO 27001/27002. 

• Experience with enterprise integrations and workflow automation; integration experience is preferred. 

Licenses/Certifications Preferred:

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Information Systems Security Architecture Professional (ISSAP), Information Systems Security Engineering Professional (ISSEP), or other relevant identity/security certifications. 

Skills and Abilities:

• Strong working knowledge of Identity and Access Management, Identity Governance, and Security Technologies. 

• Strong knowledge of SailPoint, Microsoft Entra ID, Conditional Access, identity lifecycle processes, and enterprise access governance. 

• Understanding of security design principles and architecture-level concepts. 

• Experience formulating and prioritizing security requirements according to the organization's risk appetite. 

• Understanding of relevant frameworks including NIST, ITIL, or ISO 27001/27002. 

• Strong stakeholder management and communication skills, with the ability to align business, security, infrastructure, and application teams around identity initiatives. 

• Ability to lead both operational service delivery and engineering/automation roadmaps across multiple identity security teams. 

Physical Demands:

• Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this job.