At TJX Companies, every day brings new opportunities for growth, exploration, and achievement. You’ll be part of our vibrant team that embraces diversity, fosters collaboration, and prioritizes your development. Whether you’re working in our four global Home Offices, Distribution Centers or Retail Stores—TJ Maxx, Marshalls, Homegoods, Homesense, Sierra, Winners, and TK Maxx, you’ll find abundant opportunities to learn, thrive, and make an impact. Come join our TJX family—a Fortune 100 company and the world’s leading off-price retailer.
Job Description:
TJX is seeking an experienced strategic leader to run the Identity Governance & Administration function. As an AVP, this role will be part of the Global IT and IT Security Leadership Teams, reporting into xxxx.
Cybersecurity is a critical function at TJX. The team is a global, centrally managed organization within a global IT function responsible for technology for our home offices, stores, and distribution centers operating in the U.S., Canada, Europe, Australia, and India.
Position Description
The AVP, Identity and Access Management provides strategic oversight and leadership for the enterprise IGA program. The function governs identity lifecycle management, access management, single sign-on, access requests and approvals, provisioning and deprovisioning, access certifications, entitlement management, role management, segregation of duties, identity data quality, and the onboarding of applications into IGA services.
As an AVP of Cybersecurity, you will lead a global team across architecture, engineering, operations, analysis, and application onboarding. You will establish the strategy and roadmap, strengthen identity controls, simplify access processes, improve audit readiness, and partner with business and technology leaders to ensure access remains appropriate throughout the identity lifecycle.
What You’ll Do
IAM Strategy and Roadmap: Defines and executes the enterprise strategy for IGA and Access Management including target state, multiyear roadmap, operating model, and investment priorities aligned with cybersecurity risk, business needs, and modernization goals.
Identity Lifecycle and Access Governance: Leads joiner, mover, and leaver processes; access requests and approvals; provisioning and deprovisioning; access certifications; and remediation of inappropriate access.
Entitlement and Role Management: Establishes standards for entitlement ownership, cataloging, risk classification, role design, birthright access, segregation of duties, access packages, exceptions, and retirement.
Application Onboarding: Leads the intake, prioritization, integration, testing, and production readiness of applications onboarded to IGA using repeatable patterns, clear controls, and accountable ownership.
Product and Operational Leadership: Manages technology and services with clear roadmaps, delivery priorities, service levels, metrics, platform resilience, incident and change management.
Risk and Compliance: Ensures IAM services meet regulatory, risk, and security requirements; drives timely remediation of control gaps and findings.
Automation and Modernization: Uses workflow automation, analytics, self-service, standardized integrations, and process simplification to improve control consistency and reduce access and onboarding cycle times.
What You’ll Need
Minimum 10+ years of experience in identity and access management, cybersecurity, information technology, or a related field, with at least 5 years of senior leadership experience.
Experience leading a global IGA function or large-scale identity transformation in a complex, multinational corporate environment with geographically dispersed teams.
Experience leading enterprise platform strategy, architecture, implementation, integration, operations, upgrades, and continuous improvement;
Proven ability to lead major platform implementations and broad application onboarding programs involving business owners, application teams, control partners, vendors, and managed service providers.
Strong understanding of least privilege, Zero Trust, role-based and attribute-based access, birthright access, orphan-account management, policy enforcement, identity analytics, and access risk.
Experience with cybersecurity controls, audit, regulatory compliance, risk management, incident and change management, disaster recovery, and IT service management practices.
Bachelor’s degree in information systems, computer science, cybersecurity, or a related field, or an equivalent experience
Executive presence and excellent presentation, verbal, and written communication skills, including the ability to translate complex identity and control topics into clear business decisions.
Ability to build strong relationships with teammates, leadership, senior management, application and business owners, auditors, control partners, vendors, and other internal and external stakeholders.
Address:
300 Value WayLocation:
USA Home Office Marlborough MA 300 Value WayThis position has a starting salary range of USD $175,700.00 to $228,400.00 per year. Actual starting pay is determined by a number of factors, including relevant skills, qualifications, and experience. This position is eligible for an annual incentive as well as long-term incentives.Skills Required
- 10+ years of experience in identity and access management, cybersecurity, information technology, or a related field
- At least 5 years of senior leadership experience
- Experience leading a global IGA function or large-scale identity transformation in a complex multinational corporate environment
- Experience leading enterprise platform strategy, architecture, implementation, integration, operations, upgrades, and continuous improvement
- Experience leading major platform implementations and broad application onboarding programs
- Strong understanding of least privilege, Zero Trust, role-based and attribute-based access, birthright access, orphan-account management, policy enforcement, identity analytics, and access risk
- Experience with cybersecurity controls, audit, regulatory compliance, risk management, incident and change management, disaster recovery, and IT service management practices
- Bachelor’s degree in information systems, computer science, cybersecurity, or a related field, or equivalent experience
- Executive presence and excellent presentation, verbal, and written communication skills
- Ability to build relationships with teammates, leadership, senior management, application and business owners, auditors, control partners, vendors, and internal and external stakeholders
The TJX Companies, Inc. Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about The TJX Companies, Inc. and has not been reviewed or approved by The TJX Companies, Inc..
-
Healthcare Strength — Health coverage is portrayed as comprehensive for eligible associates, including medical, dental, vision, and broad well-being programs.
-
Retirement Support — A 401(k) with company match and other retirement-related benefits are emphasized as part of the total rewards package.
-
Leave & Time Off Breadth — Paid time off options, including vacation, sick time, and paid parental leave, are available and often described as a strong aspect of the offering.
The TJX Companies, Inc. Insights
What We Do
TJX is the leading off-price apparel and home fashions retailer in the U.S. and worldwide, with four global home offices, seven brands, nearly 4,700 stores in nine countries, and five distinctive branded e-commerce sites. As Associates, we make a difference with our contributions—collaborating in delighting shoppers with hidden treasures.
