Portfolio Director - Identity and Access Management

Portfolio Director - Identity and Access Management

The Portfolio Director is a senior manager that leads an organization responsible for managing the entire life cycle of a portfolio of complex IT solutions. A key focus is delivering and operating these IT solutions for the Church globally. This position requires a combination of the ability to establish and communicate strategic vision, exceptional customer focus, executive presence, and extensive experience leading technology-focused product and service delivery in a large global organization.

This Portfolio Director will provide strategic leadership for enterprise identity and access management, delivering secure, scalable, and compliant access services that protect organizational assets while enabling users, applications, and emerging AI capabilities to operate effectively.

This individual works with divine guidance to provide or support technology that furthers the mission of the Church and reflects the eternal impact of the gospel.

We value early, mid and late-career candidates and encourage all applicants with the posted skills and abilities to apply.

Responsibilities

• Lead the strategy, governance, and delivery of identity and access management services. Oversee authentication, authorization, identity governance, privileged access management, directory services, and access lifecycle processes while partnering with Information Security, and technology leaders to reduce risk, meet compliance requirements, and enable secure digital experiences.
• Partner closely with the Chief Information Security Officer to align the IAM portfolio roadmap with the enterprise security strategy, risk posture, and Zero Trust objectives
• Own the strategy and delivery of the Church's global sign-in experience used by millions of members, employees, and volunteers, balancing strong security with a simple, welcoming, and accessible user experience
• Ensure the identity platform meets high-availability, performance, and disaster recovery objectives appropriate for a mission-critical, 24/7 global service
• Lead the portfolio's response to identity-related threats such as account takeover, credential stuffing, phishing, and fraud, in coordination with security operations
• Ensure identity solutions comply with applicable global privacy and data protection regulations and Church data policies
• Manage strategic relationships with IAM vendors and platform partners, including contract, licensing, and roadmap alignment
• Promote and support portfolio, division, and department strategies and goals by collaborating cross-portfolio and cross-team
• Demonstrate leadership and create a high performing workforce by creating a culture of fostering accountability, building capability, and positively influencing others
• The employee must regularly manage the work of other employees (may include mixed workforce)
• The employee is authorized, in partnership with HR, to hire or fire employees and recommends advancement, promotion or any other change of status of employees within their reporting line

Qualifications

• Bachelor's degree or equivalent experience in related field.
• 10 years combined senior level management responsibility within a technology organization including five years managing large successful tech rollout projects for a large organization
• 5+ years of leadership experience in Identity and Access Management, cybersecurity, or a closely related discipline within a large enterprise.
• Understanding of how identity serves as the control plane for security, compliance, and business operations.
• Ability to balance security with user experience.
• Experience securing administrative accounts, privileged credentials, just-in-time access, privileged session controls, and least-privilege models.
• Strong understanding of insider risk and privilege escalation threats.
• Ability to align IAM capabilities with audit, regulatory, privacy, and security requirements.
• Experience leading compliance initiatives and responding to audit findings.
• Demonstrated success developing IAM roadmaps, policies, standards, and target-state architectures.
• Ability to define how workforce, member/customer, partner, application, and machine identities are managed across the enterprise.
• Understanding of identity governance and administration (IGA), privileged access management (PAM), and role- or attribute-based access models.
• Experience leading large-scale identity platforms such as Microsoft Entra ID, Okta, SailPoint, CyberArk, Ping, ForgeRock, Oracle Identity, or similar ecosystems.
• Strong understanding of Zero Trust principles, least privilege, access governance, and identity-centric security models.
• Ability to partner effectively with security organizations while enabling business outcomes.
• Experience building and maintaining executive-level relationships. International experience is a plus.
• Skilled at establishing vision and have the ability to translate that vision into business solutions.
• Strong IT product and operational experience, including budgeting, resource management, and metrics.
• Exceptional customer focus on customer service.
• Excellent written and verbal communication skills with experience presenting to technical and non-technical audiences at an executive level.
• High level of professionalism with strong interpersonal, conflict resolution and problem-solving skills.
• Able to deliver results in an environment of competing priorities and changing project scope.
• Experience with cost analysis, budgeting, performance management and metrics.
• Strong technology implementation background, project management experience and proven product management experience
• This job operates in a professional environment
• To successfully perform the essential functions of the job there may be physical requirements which need to be met such as sitting for long periods of time and using computer monitors/equipment

Preferred:

• Master's degree

• About Us

• Church employees find joy and satisfaction in using their unique talents and abilities to further the Lord’s work. From the IT professional who develops an app that sends the gospel message worldwide, to the facilities manager who maintains our buildings— giving Church members places to worship, teach, learn, and receive sacred ordinances—our employees seek innovative ways to share the gospel of Jesus Christ with the world. They are literally working in His kingdom.

• Only members of the Church who are worthy of a temple recommend qualify for employment. Apart from this, the Church is an equal opportunity employer and does not discriminate in its employment decisions on any basis that would violate U.S. or local law.

• Qualified applicants will be considered for employment without regard to race, national origin, color, gender, pregnancy, marital status, age, disability, genetic information, veteran status, or other legally protected categories that apply to the Church. The Church will make reasonable accommodations for qualified individuals with known disabilities.