Staff Security Risk & Compliance Program Manager - Access Management

Stack

Responsibilities

• ▹Own the strategic direction and roadmap of the internal access management program
• ▹Lead enforcement of service-to-service (S2S) authentication across Trust & Security-owned surfaces
• ▹Formalize non-human identity (service accounts, keys, workload credentials) into a governed program
• ▹Stand up access controls for AI agents as agentic workloads acquire production access
• ▹Own the Access Management Standard and operationalize least privilege and separation of duties
• ▹Own access metrics and reporting, running the monthly execution and executive-review cadence
• ▹Drive cross-functional delivery with engineering, platform and identity teams

Requirements

• ▹8+ years in security program management, IAM or a related discipline, including 3+ years running an enterprise/platform-scale access program
• ▹Deep expertise in IAM concepts: least privilege, separation of duties, RBAC/ABAC, JIT, PAM
• ▹Working knowledge of machine and workload identity: S2S authentication, non-human identity, secrets/key management
• ▹Strong security engineering fundamentals across GCP, AWS and/or Azure, including Kubernetes access models
• ▹Familiarity with identity platforms and access tooling (e.g., Okta)

Nice to have

• ▹Experience integrating access processes into GRC and access-orchestration platforms
• ▹Bias toward automating access decisions over manual operations

Soft skills

About the company

Confluent builds a data streaming platform that puts information in motion in near real-time. The company is a subsidiary of IBM.