SENIOR DIRECTOR OF IDENTITY(REMOTE)

Job Summary

The Senior Director of Identity leads Compass Group's enterprise Identity Security strategy and operations across North America including access operations, cloud identity, privileged access, identity lifecycle management, and ERP security. This leader will modernize identity from traditional access administration to a risk-based security capability, including Identity Security Posture Management, expanded ERP security for SAP, JDE and SOX-relevant applications.

Key Responsibilities

Strategic Leadership & Governance

• Define and execute the enterprise Identity Security strategy, roadmap, operating model, standards and measurable risk-reduction objectives.
• Advise Cybersecurity and technology leadership on identity risk, investments, architecture and control effectiveness; establish meaningful KPIs and KRIs.
• Partner with HR, Internal Audit, Risk, Compliance, application owners and business leaders to align identity controls with business and regulatory requirements.

Identity Governance, Lifecycle & Access Operations

• Lead enterprise IGA, joiner/mover/leaver processes, access requests, approvals, provisioning, deprovisioning, certifications and entitlement governance for employees, contractors and partners.
• Transform Security Administration into a scalable Access Operations function with service levels, automation, quality controls and clear accountability.
• Integrate disparate Identity Lifecycle Management into the broader enterprise identity model and drive least privilege, role-based access and timely removal of unnecessary access.

Identity Security, Cloud & Privileged Access

• Refocus Microsoft Entra investments toward Identity Security Posture Management to identify and reduce excessive privilege, dormant identities, risky configurations and identity attack paths.
• Provide strategic oversight for all cloud identity across AWS, Azure and Google Cloud, including authentication, authorization, federation and cloud entitlements.
• Establish controls for governance on privileged and non-human identities, including service accounts, workload identities, secrets and administrative access; promote phishing-resistant MFA and modern authentication standards.

ERP & Application Security

• Expand SAP Security into an enterprise ERP Security capability covering SAP, JDE, SOX-relevant applications and other critical platforms.
• Oversee ERP role design, sensitive access, Segregation of Duties, privileged access, access certification and remediation of control deficiencies.
• Integrate ERP and application access into enterprise identity governance and lifecycle processes.

Team, Technology & Vendor Leadership

• Build and lead a high-performing Identity Security organization spanning governance, engineering, access operations and ERP security; develop leaders and succession plans.
• Own the identity technology roadmap and strategic vendor relationships, including platform evaluations, major investments, licensing and service-provider performance.
• Drive automation, simplification and integration across identity platforms, HR systems, cloud environments, enterprise applications and Cybersecurity capabilities.

Qualifications

Education & Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or related field, OR equivalent relevant experience.
• 10+ years of progressive Identity, IAM or Cybersecurity experience, including 5+ years leading enterprise identity teams or programs in a large, complex organization.
• Demonstrated experience leading enterprise identity transformation across IGA, lifecycle management, authentication/federation, privileged access, cloud identity and access operations.
• Experience with ERP security and controls, preferably SAP and/or JDE, including role design, Segregation of Duties and SOX requirements.
• Proven experience managing technology vendors, service providers, budgets, roadmaps and executive stakeholders.

Certifications (Preferred)

• CISSP, CISM, CISA, CRISC, or similar security/identity certification; relevant Microsoft Entra, SailPoint, CyberArk, Google Cloud, AWS or SAP security certifications are a plus.

Technical & Vendor Experience

• Experience with several enterprise identity platforms such as Microsoft Entra ID, Active Directory, Google Cloud Identity/Workspace, Pathlock, CyberArk, 1Password or equivalent technologies.
• Strong knowledge of IGA, PAM, RBAC/ABAC, least privilege, Zero Trust, SAML, OAuth 2.0, OpenID Connect, SCIM, FIDO2, Conditional Access and identity threat/exposure concepts.
• Working knowledge of AWS IAM, Azure/Entra, Google Cloud IAM, SAP Security/GRC, JDE Security, ServiceNow and API/script-based identity automation is preferred.

Leadership & Soft Skills

• Executive-level communication and ability to translate complex identity risks into business impact, priorities and investment decisions.
• Strong strategic thinking, operational discipline, organizational leadership, collaboration and ability to influence across business and technology teams.
• Proven ability to lead complex transformation, develop high-performing teams and balance security, user experience and business enablement.