Director Identity & Access Management (IAM)

Job Summary

The Director of Identity & Access Management (IAM), reporting to the CISO, is responsible for the full identity lifecycle for all hospital system staff, contractors, third-party access, and non-human / service accounts. The Director of IAM will be responsible for ensuring compliance with healthcare regulations and the security objectives of the organization (i.e., Zero Trust and least privileged principles). The Director of IAM will collaborate closely with business stakeholders in HR, IT, and clinical leadership to ensure secure and efficient access to systems and patient data, while operating within an Agile delivery model.

Key Responsibilities

• Develop and implement a multi-year IAM roadmap aligned with organizational goals and healthcare regulatory requirements like HIPAA, with input into enterprise IT and security strategic planning.
• Lead and mentor a team of IAM professionals, fostering a culture of continuous improvement, education, and awareness across both IT staff and end-users (including clinical and business users).
• Oversee the design, implementation, and maintenance of IAM systems, including user provisioning, access certification, privileged access management (PAM), multi-factor authentication (MFA), and automated / self-service capabilities (e.g., automated provisioning / deprovisioning, self-service password reset).
• Ensure IAM practices adhere to regulatory obligations and audit requirements, including the creation, maintenance, and periodic review of IAM-related policies, standards, and procedures.
• Identify and mitigate security risks associated with identity management, including establishing incident response processes for IAM-related security events such as access misuse, credential compromise, or insider threats.
• Partner with IT, security, compliance, and business units to align IAM initiatives with organizational objectives, clinical workflows, patient safety, and business continuity.
• Manage the IAM budget, optimize spending, and oversee vendor relationships.
• Oversee identity lifecycle, including provisioning, deprovisioning, and role-based access, emergency / break-glass access, and temporary access requests, with appropriate post-event reviews.
• Lead efforts to integrate IAM with HRIS, ERP, EHR / clinical systems, and business systems.
• Track key performance indicators (KPIs), analyze IAM system effectiveness, and provide reports to executive leadership, including metrics such as time to provision / deprovision, access certification completion rates, number of exceptions, and automation / self-service adoption.
• Support audit readiness and compliance with identity governance, as well as participation in internal / external audits and maturity assessments.
• Ensure strong monitoring, audit logging, and analytics of identity events, including timely review and response to anomalous activity.
• Represent IAM at security / governance committees and provide regular updates to executive leadership.
• Champion adoption of new technologies (cloud IAM, mobile, IoT) and guide the organization through evolving regulatory requirements.

Preferred Qualifications

Leadership Experience

Technical & Domain Expertise

Minimum Requirements

#J-18808-Ljbffr