Lead Information Security Operations Specialist

Leads the end-to-end strategy and execution of the IAM Access Certification program, ensuring certification campaigns are conducted with consistent cadence and rigor across both centralized (IGA-onboarded) and decentralized applications.
Leads application scoping efforts to determine onboarding eligibility to the centralized IGA platform and, where applicable, identifies the appropriate integration type.
Oversees the build-out, implementation, and ongoing operational health of Segregation of Duties (SoD) rules and Role Based Access Control (RBAC) profiles, partnering with application teams and Lines of Business who are responsible for defining the underlying SoD and RBAC requirements.
Leads user access review campaigns to enforce the principle of least privilege, ensuring individuals retain only the access required to perform their job responsibilities.
Applies the same access certification standards, cadence, and rigor to decentralized applications not onboarded to the centralized IGA platform, including those currently managed through manual, email, or spreadsheet-based processes, and drives improvements to standardize and streamline these processes over time.
Identifies and implements opportunities to leverage AI-enabled capabilities, including those native to Saviynt, to improve certification efficiency and accuracy through outlier detection, access recommendations, and other intelligent review mechanisms.
Establishes and matures certification practices for Non-Human Identities (NHIs), including service accounts and AI agents, ensuring appropriate ownership, review, and governance controls are in place.
Serves as the subject matter expert on IAM access governance, providing mentorship and guidance to other IT security team members supporting the certification program.
Supports the organization's migration from SailPoint IdentityIQ to Saviynt, including validating that access certification, SoD, and RBAC capabilities are properly configured and operational within the new platform.
Coordinates with internal audit and information security assessment teams to identify weaknesses in access governance processes and strengthens existing controls accordingly.
Conducts analysis of organizational needs and goals to guide the ongoing development of access certification, SoD, and RBAC capabilities.
Identifies and evaluates emerging data access control technologies, techniques, and safeguards relevant to identity governance and access certification.