Senior Manager, Identity & Privileged Access Governance

Ready to turn identity risk into business confidence? As Senior Manager, Identity & Privileged Access Governance, you will develop how people, services, and automation systems gain and use access.

This role protects critical assets and supports business priorities.

You'll influence executive decisions, build a high-performing governance team, and modernize how we lead identity risk by implementing automated processes, ongoing oversight, and clear accountability.

This position is in Richmond, VA with a hybrid work schedule, but we will consider a remote working arrangement for the ideal applicant.This is a governance leadership role, not hands-on platform administration.

You'll develop policies, standards, and control frameworks for identity and access management and privileged access management while collaborating with Identity Engineering, Infrastructure and Cloud Operations, Information Security, Human Resources, Technology Security and Compliance, Internal Audit, External Audit, and business teams to improve access governance and achieve measurable risk reduction.What you will be doing:


* Setting the enterprise IAM/PAM governance strategy, policies, control framework, and multi-year roadmap while prioritizing investments and resources based on risk reduction, business value, and delivery capacity.


* Establishing clear control ownership, independent review, and decision rights across business and technology teams while advancing least privilege, segregation of duties, and appropriate administrative access controls.


* Leading governance for identity lifecycle, access certification, privileged access, and account ownership while holding control owners accountable for timely access changes, disablement, revocation, and remediation.


* Advising privileged-account governance across administrator, shared, emergency, default, and local accounts while setting expectations for credential protection, authentication controls, session monitoring, exception management, and coverage.


* Driving audit readiness, management control assurance, systemic root-cause remediation, and exception governance while providing executives with clear access to control efficiency, residual exposure, remediation progress, and risk-reduction outcomes.


* Modernizing identity controls through automation, continuous monitoring, lifecycle reconciliation, access-review workflows, evidence collection, and appropriately governed automated remediation.


* Expanding governance for non-human identities, including service accounts, workloads, applications, automation, bots, and AI agents, by establishing accountable ownership, lifecycle controls, credential safeguards, periodic certification, and least-privilege access.


* Developing governance talent and crafting the perspectives of senior leaders across business, engineering, operations, security, risk, compliance, audit, and Human Resources to resolve opposing priorities, strengthen accountabilit...