We are seeking a highly experienced Senior Privileged Access Management (PAM) Lead to drive key PAM governance, risk reduction, and remediation initiatives across the enterprise. This is a hands-on, delivery-focused role responsible for improving privileged access controls, reducing security risk, and partnering with stakeholders across Technology, Risk, Compliance, and Internal Audit.
The ideal candidate will quickly assess the current environment, independently lead remediation efforts, and deliver measurable outcomes across multiple workstreams. This role requires strong expertise in CyberArk, and privileged access governance. This is not a CyberArk administration-only position; it is a strategic and execution-focused leadership role.
Key Responsibilities- Lead and execute enterprise-wide PAM governance, risk reduction, and remediation initiatives.
- Partner with Governance, Risk, Compliance, Infrastructure, and Application teams to improve privileged access controls and address audit findings.
- Review privileged access requests, policy exceptions, service account access, and Active Directory group structures to identify risks and recommend appropriate controls.
- Drive efforts to reduce standing administrative privileges and migrate users to secondary administrative accounts across Windows, Linux, and endpoint environments.
- Monitor PAM Key Risk Indicators (KRIs), investigate trends, determine root causes, and coordinate remediation activities.
- Support Internal Audit engagements, including evidence collection, issue remediation, and control validation.
- Provide clear executive-level status reporting, highlighting progress, risks, dependencies, and remediation plans.
- Coordinate cross-functional teams to ensure remediation initiatives are completed on schedule.
- CyberArk privileged and service account onboarding.
- Reduction of global and standing administrator access.
- Remediation of clear-text credential exposure through CyberArk and approved secrets management solutions.
- Active Directory nested group and file share permission cleanup.
- SailPoint entitlement governance, ownership validation, and application onboarding improvements.
- Delivery of audit and risk-driven remediation activities.
- Identity and Access Management (IAM) experience, including focus on Privileged Access Management.
- Proven success leading enterprise PAM initiatives within large, complex, and regulated environments.
- Strong hands-on experience with CyberArk, including privileged account management, service account onboarding, vaulting, and remediation activities.
- Deep knowledge of Active Directory, privileged groups, secondary administrator accounts, nested groups, and Windows access controls.
- Working knowledge of Linux privileged access management, sudo administration, service accounts, and SSH controls.
- Experience with SailPoint IdentityIQ and/or IdentityNow, including entitlement governance, ownership management, certifications, and application onboarding.
- Experience collaborating with Internal Audit, Risk, Compliance, Infrastructure, and Application teams.
- Demonstrated ability to drive remediation efforts across multiple stakeholders without direct authority.
- Strong communication and executive reporting skills.
- Experience in financial services or other highly regulated environments.
- Background supporting audit, compliance, and risk management initiatives.
- Familiarity with enterprise secrets management and privileged account governance best practices.
Skills Required
- Identity and Access Management (IAM) experience with focus on Privileged Access Management
- Proven success leading enterprise PAM initiatives in large, complex, regulated environments
- Strong hands-on experience with CyberArk including privileged account management, service account onboarding, vaulting, and remediation
- Deep knowledge of Active Directory, privileged groups, secondary administrator accounts, nested groups, and Windows access controls
- Working knowledge of Linux privileged access management, sudo administration, service accounts, and SSH controls
- Experience with SailPoint IdentityIQ and/or IdentityNow for entitlement governance, ownership management, certifications, and application onboarding
- Experience collaborating with Internal Audit, Risk, Compliance, Infrastructure, and Application teams
- Demonstrated ability to drive remediation efforts across multiple stakeholders without direct authority
- Strong communication and executive reporting skills
- Experience in financial services or other highly regulated environments
- Background supporting audit, compliance, and risk management initiatives
- Familiarity with enterprise secrets management and privileged account governance best practices
What We Do
Customers of all sizes globally rely on Simeio to help secure their organizations. An innovative and industry leader, Simeio offers professional services, Identity and Access Management (IAM) managed services and Identity as a Service (IDaaS). Its full range of services is powered by an industry-first IAM Virtualization Platform delivered via Simeio's Identity SOC. Simeio's Identity SOC is the first and only solution of its kind designed specifically to operate, monitor, and defend complex multi-vendor IAM infrastructures and deliver actionable business intelligence. Simeio's client base is expanding as interest in identity and access management and IT governance, risk and compliance grows across all sectors. Headquartered in Atlanta, Georgia, Simeio has operations in India, the United Kingdom, Europe, across North America, South America and Canada. We are a cutting-edge growing company with a strong dedication to our employees and their opportunity for growth and success. Simeio offers a state-of-the-art technology office with plans for continued growth and expansion. Our company culture is crucial to those driven for success with an entrepreneurial spirit, solution oriented, and individual contributors, as well as, team players.
