Identity and Access Management (IAM) Manager

Thank you for your interest in a career at Regions. At Regions, we believe associates deserve more than just a job. We believe in offering performance-driven individuals a place where they can build a career --- a place to expect more opportunities. If you are focused on results, dedicated to quality, strength and integrity, and possess the drive to succeed, then we are your employer of choice. Regions is dedicated to taking appropriate steps to safeguard and protect private and personally identifiable information you submit. The information that you submit will be collected and reviewed by associates, consultants, and vendors of Regions in order to evaluate your qualifications and experience for job opportunities and will not be used for marketing purposes, sold, or shared outside of Regions unless required by law. Such information will be stored in accordance with regulatory requirements and in conjunction with Regions’ Retention Schedule for a minimum of three years. You may review, modify, or update your information by visiting and logging into the careers section of the system. Job Description: At Regions, the Identity and Access Management (IAM) Manager leads a diverse team of engineers, analysts, and administrators in implementing IAM best practices across the enterprise and ensures operating systems are secure. This position strives to increase efficiency and improve IAM capabilities for the organization. Additionally, this position continuously improves, designs, develops, implements, and monitors appropriate metrics to maintain quality and efficiency. Primary Responsibilities Manages a group of analysts, engineers, or administrators to help support the IAM, Mainframe or Operation Systems teams within the Information Security function Develops and maintains Information Security standards related to Identity & Access Management Ensures all processes are documented appropriately Works closely with Risk/Audit partners to meet all compliance objectives as they relate to access management Develops Key Risk Indicators (KRI's) and Key Performance Indicators (KPI's) to ensure operational effectiveness Identifies opportunities for improvement in the IAM processes and systems Plans, estimates, staffs, organizes and monitors significant project activities Provides clear and effective communication with all levels of the organization Fosters an inclusive, collaborative environment within the team, with Enterprise Architects, Infrastructure, Support and with other IT teams Identifies problematic areas and implements strategic solutions Serves as primary escalation point for IAM-related issues and provides solutions Manages the teams through recruiting, training, coaching, communicating job expectations and appraising associate performance Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored to strengthen risk management, compliance, and cyber security, effectively mitigating risk to levels within the company’s risk appetite Ensures disciplined change management by evaluating risk and control impacts when designing or implementing changes to processes, systems, products, and/or services This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay. This position is incentive eligible. Requirements Bachelor's degree in a related field and six (6) years of related experience Two (2) years of lead or supervisory/managerial experience Preferences Basic understanding of UNIX security, as it relates to user access and provisioning Experience managing Information Technology and/or Information Security projects Experience with Agile methodology Experience with PowerBI/Tableau for reporting projects Good understanding of network and infrastructure (Networking protocol knowledge is an advantage- TCP/IP, DNS, firewalls, proxies, IDS, IPS etc Recognized security industry certifications preferred (CISSP, CAP, etc.) Significant knowledge of Active Directory security, as it relates to user access and provisioning Skills and Competencies Ability to be broadly focused and manage multiple efforts concurrently Ability to work effectively to build relationships with colleagues, application owners, and executive management through positive interaction Ability to multi-task, to be self-initiated, and work independently Demonstrate planning and project management skills Excellent customer service and interpersonal skills Proactive, decisive, action-oriented individual Proven ability to set technology strategy Strong attention to detail and outstanding analytical skills Strong organizational skills Strong written and verbal communication skills Understanding of and ability to interpret applicable rules, regulations, and industry guidance Additional Responsibiltiies: Oversee administration and optimization of enterprise secrets platforms (HashiCorp Vault and CyberArk), ensuring high availability, scalability, and resilience Drive automation of secrets and vault operations (onboarding, provisioning, lifecycle management) through CI/CD pipelines, infrastructure-as-code, and DevSecOps best practices Lead the expansion and maturation of enterprise secrets capabilities, promoting adoption of automated password and secrets management to eliminate manual processes and static credentials Partner with application, platform, and security teams to onboard services and scale secure secrets workflows across multi-cloud and on-prem environments, establishing standards for access, rotation, and usage Build and lead a high-performing team with strong cloud, DevSecOps, and platform engineering expertise, providing technical leadership aligned to IAM strategy and modern security practices Preferred Qualifications: Hands-on experience leading and scaling enterprise secrets management platforms, including HashiCorp Vault and/or CyberArk, with responsibility for platform availability, resiliency, performance optimization, and operational excellence. Demonstrated expertise in DevSecOps, automation, and infrastructure-as-code practices, including the implementation of automated secrets lifecycle management, and CI/CD integration Experience driving enterprise-wide adoption of privileged access and secrets management capabilities across multi-cloud and hybrid environments, establishing standards for credential rotation, machine identity management, secure application onboarding, and secrets governance. Proven leadership in building and developing high-performing engineering teams with expertise in cloud security, platform engineering, and identity technologies, while partnering effectively with application, infrastructure, and cybersecurity stakeholders to deliver strategic IAM outcomes. This position is intended to be onsite, now or in the near future. Associates will have regular work hours, including full days in the office three or more days a week. The manager will set the work schedule for this position, including in-office expectations. Regions will not provide relocation assistance for this position, and relocation would be at your expense. The locations available for this role are Birmingham, AL, Atlanta, GA, Nashville, TN, or Charlotte, NC. Regions will not sponsor applicants for work visas for this position at this time. Applicants for this position must currently be authorized to work in the United States on a full-time basis. Position Type Full time Compensation Details Pay ranges are job specific and are provided as a point-of-market reference for compensation decisions. Other factors which directly impact pay for individual associates include: experience, skills, knowledge, contribution, job location and, most importantly, performance in the job role. As these factors vary by individuals, pay will also vary among individual associates within the same job. The target information listed below is based on the Metropolitan Statistical Area Market Range for where the position is located and level of the position. Job Range Target: Minimum: $140,670.75 USD Median: $184,390.00 USD Incentive Pay Plans: This role is eligible to participate in the annual discretionary incentive plan. Employees are eligible to receive a discretionary award based on individual, business, and/or company performance.Opportunity to participate in the Long Term Incentive Plan. Benefits Information Regions offers a benefits package that is flexible, comprehensive and recognizes that "one size does not fit all" for benefits-eligible associates. Listed below is a synopsis of the benefits offered by Regions for informational purposes, which is not intended to be a complete summary of plan terms and conditions. Paid Vacation/Sick Time 401K with Company Match Medical, Dental and Vision Benefits Disability Benefits Health Savings Account Flexible Spending Account Life Insurance Parental Leave Employee Assistance Program Associate Volunteer Program Please note, benefits and plans may be changed, amended, or terminated with respect to all or any class of associate at any time. To learn more about Regions’ benefits, please click or copy the link below to your browser. Location Details Riverchase Operations Center Location: Hoover, Alabama Equal Opportunity Employer/including Disabled/Veterans Job applications at Regions are accepted electronically through our career site for a minimum of five business days from the date of posting. Job postings for higher-volume positions may remain active for longer than the minimum period due to business need and may be closed at any time thereafter at the discretion of the company. About Regions At Regions, our culture focuses on five core values that are a commitment to how we will do business: Put people first Do what is right Focus on your customer Reach higher Enjoy life Through these values, our mission to make life better drives our desire to improve and make a positive difference in the communities where we work and live through financial investments and volunteering.