Enterprise IAM Product Owner (Associate Director) (Durham)

Your role at Clorox:

We are seeking a highly skilled and motivated Enterprise Identity & Access Management (IAM) Product Owner to lead the strategy, governance, and delivery of identity security capabilities across the enterprise.

As an IAM Product Owner within the Cybersecurity organization, you will play a pivotal role in defining and delivering secure, scalable, and modern identity services for workforce, privileged, machine, application, and AI agent identities. You will serve as the bridge between business stakeholders, cybersecurity, architecture, and engineering teams, ensuring IAM capabilities align with business objectives, regulatory requirements, and evolving security threats.

This role owns the enterprise IAM roadmap and product strategy, encompassing Identity Governance & Administration (IGA), Privileged Access Management (PAM), modern authentication, multi-factor authentication (MFA), passwordless authentication, Identity Threat Detection & Response (ITDR), and governance of machine and AI agent identities. The role is responsible for driving the organization's transition toward phishing-resistant, passwordless authentication while enabling secure access across workforce, privileged, application, machine, and AI-powered environments.

In this role, you will:

Strategy & Governance

• Define and communicate a compelling IAM vision, strategy, and roadmap that aligns with organizational security and business objectives.
• Own the enterprise identity strategy for workforce, privileged, machine, application, and AI agent identities.
• Align IAM capabilities with organizational goals, ensuring scalability, flexibility, resilience, and operational effectiveness.
• Establish and enforce IAM standards, governance processes, and policies while maintaining supporting documentation and operating procedures.
• Ensure IAM platforms and services adhere to internal standards, industry best practices, and regulatory requirements.
• Monitor emerging technologies, threat trends, identity security risks, and regulatory developments, incorporating them into the IAM strategy and roadmap.
• Drive adoption of Zero Trust principles throughout identity and access management capabilities.

Identity Governance & Administration

• Lead the strategy and evolution of Identity Governance & Administration (IGA) capabilities, including identity lifecycle management, joiner-mover-leaver processes, access requests, role management, birthright access, and access certifications.
• Ensure effective governance of workforce, contractor, partner, privileged, and non-human identities.
• Drive least-privilege access models, segregation of duties, and continuous access review processes.

Non-Human & AI Agent Identity Security

• Define and implement governance, lifecycle management, authentication, authorization, and monitoring controls for AI agents, machine identities, service accounts, APIs, service principals, and application identities.
• Establish standards and guardrails for AI agent identities, ensuring appropriate identity proofing, credential management, least-privilege access, segregation of duties, and continuous oversight.
• Collaborate with AI, data, and application teams to integrate identity security controls into AI platforms, autonomous systems, AI agents, and agentic workflows.
• Develop strategies to manage and secure the growing population of non-human identities, including secrets, certificates, tokens, API credentials, service accounts, and cryptographic keys.
• Define governance and risk management controls for AI-enabled applications and autonomous systems to ensure secure, auditable, and compliant identity operations.

Authentication, MFA & Passwordless Security

• Define and lead the enterprise strategy for modern authentication, MFA, passwordless authentication, and adaptive access controls.
• Drive the organization's transition from password-based authentication to phishing-resistant passwordless authentication technologies.
• Establish governance and standards for authentication technologies including FIDO2 security keys, passkeys, Microsoft Authenticator, Windows Hello for Business, certificate-based authentication, and biometric authentication methods.
• Partner with Security Operations, Identity Engineering, and End User Experience teams to improve authentication security while reducing end-user friction.
• Develop authentication strategies that balance security, usability, resilience, and business productivity.
• Leverage Conditional Access, risk-based authentication, device trust, and contextual access controls to strengthen identity protection.
• Measure and drive adoption of MFA and passwordless authentication capabilities through defined security and user experience metrics.
• Ensure authentication and authorization controls are consistently applied across hybrid, cloud, SaaS, machine-to-machine, and AI-enabled environments.

Identity Threat Protection

• Integrate Identity Threat Detection & Response (ITDR) capabilities into the IAM roadmap and operating model.
• Partner with Cyber Defense and Security Operations teams to improve monitoring, detection, and response to identity-based attacks.
• Monitor emerging threats related to credential theft, token compromise, privileged escalation, machine identities, and AI agents, incorporating mitigations into the IAM strategy.
• Drive improvements in identity visibility, risk monitoring, and identity resilience across enterprise environments.

Product Management & Delivery

• Develop and communicate product roadmaps and release plans, outlining strategic priorities, milestones, feature releases, dependencies, and expected business outcomes.
• Prioritize product backlogs and manage resource allocation to ensure timely delivery of high-quality IAM capabilities using Agile methodologies.
• Work with engineering teams to develop and execute against prioritized backlogs and business objectives.
• Conduct user research and gather stakeholder feedback to identify opportunities for continuous improvement.
• Identify business outcomes and solutions that deliver on the product strategy while solving complex security and operational challenges.
• Define key performance indicators (KPIs) and metrics that measure adoption, effectiveness, and risk reduction.

Architecture & Collaboration

• Develop high-level architecture and integration strategies across IAM platforms and supporting technologies.
• Ensure IAM solutions, including SailPoint, Microsoft Entra ID (Azure AD), Active Directory, BeyondTrust, Delinea, and align with enterprise architecture standards.
• Collaborate with Security Architects, Enterprise Architects, Infrastructure teams, HR, AI teams, Application Development, and Digital organizations to translate business requirements into actionable features and user stories.
• Partner with Security and Architecture teams to align identity capabilities with corporate policies, Zero Trust principles, and industry best practices.

What we look for:

• 10+ years of experience in Identity & Access Management (IAM), Cybersecurity and Product Management including leadership experience as a Product Owner. (Must have direct management experience)
• Deep expertise in IAM domains including Identity Governance & Administration (IGA), Privileged Access Management (PAM), Identity Lifecycle Management, Role-Based Access Control (RBAC), and Zero Trust security principles.
• Hands-on experience with enterprise IAM platforms such as Microsoft Entra ID, SailPoint, Delinea, and SAP Identity Authentication Service (IAS), supporting SSO, federation, authentication, provisioning, and identity lifecycle management.
• Proven ability to develop IAM strategies, governance frameworks, operating models, and multi-year transformation roadmaps aligned with business and security objectives.
• Experience securing workforce, privileged, machine, application, service, and other non-human identities across complex enterprise environments.
• Knowledge of governance and security controls for AI agents, service accounts, APIs, service principals, machine identities, and emerging non-human identity use cases.
• Demonstrated success leading enterprise-scale identity security initiatives, including MFA, passwordless authentication, adaptive authentication, Conditional Access, and phishing-resistant authentication solutions.
• Expertise with modern authentication technologies such as FIDO2, passkeys, Windows Hello for Business, Microsoft Authenticator, and certificate-based authentication, including adoption and governance of password less programs.
• Strong cross-functional leadership skills with experience partnering across cybersecurity, infrastructure, cloud, HR, digital, and business teams to deliver enterprise technology solutions.
• Understanding of Identity Threat Detection & Response (ITDR), identity security monitoring, risk management, regulatory compliance, data privacy requirements, and industry security certifications such as CISSP, CISM, CISA, CCSP, SC-100, or SC-300.

#LI-HYBRID

Workplace type:

Hybrid- 3 days in office, 2 days remote

Our values-based culture connects to our purpose and empowers people to be the]]> <