Address
Form of work
SalaryDEPARTMENT: Cybersecurity Technology Operations
REPORTS TO: Senior Manager, Cybersecurity Technology Operations
Your Role
- Responsible for designing, implementing, and maintaining a robust and secure identity and access management framework for the organization.
- Creates and oversees the architecture, policies, procedures, and technologies related to user identities, authentication, authorization, and access controls across various systems and applications.
- Collaborates with cross-functional teams, including security, infrastructure, application, compliance, and business units, to ensure the organization's digital assets and data are protected while enabling efficient and seamless user access.
Why You Belong Here
At Victoria’s Secret & Co, we acknowledge your value. We recognize that every associate has something unique to add to our brand and business. We strive to recruit, retain, and advance diverse talent that reflects the customers we serve and the communities where we live and work. We foster a culture where everyone belongs because we know our business thrives most when we look for, listen to, and amplify diversity, equity, and inclusion.
We place the customer at the heart of everything we do. We dream big, embrace curiosity and creativity while always learning from our mistakes. We lead with integrity, trust, and respect to achieve the best outcomes as one team.
Your Impact
- Develop and maintain a comprehensive IAM strategy aligned with business goals and security requirements.
- Design IAM architecture that accommodates scalability, flexibility, and interoperability across diverse platforms and technologies.
- Evaluate and recommend IAM solutions, tools, and technologies to meet evolving business needs and security challenges.
- Define and mature user provisioning, de-provisioning, and account lifecycle management processes.
- Design and manage workflows for user onboarding, offboarding, and role changes, ensuring compliance with company policies and industry regulations.
- Design authentication mechanisms, including multi-factor authentication (MFA), single sign-on (SSO), and adaptive authentication.
- Establish authorization frameworks, role-based access controls (RBAC), and fine-grained access policies for different user roles and data classifications.
- Mature access governance processes to ensure proper access certifications, entitlement reviews, and compliance audits.
- Identify and assess IAM-related risks and vulnerabilities and develop mitigation strategies.
- Collaborate with the security team to monitor and respond to IAM-related security incidents and breaches.
- Integrate IAM solutions with existing and new applications, directories, databases, and cloud services.
- Collaborate with development teams to ensure IAM considerations are incorporated into application design and development processes.
- Create and maintain comprehensive documentation of IAM architecture, processes, and configurations.
- Provide training and guidance to IT teams, administrators, and end-users on IAM best practices, procedures, and tools.
- Stay up-to-date with emerging IAM trends, technologies, and industry best practices.
- Evaluate and recommend innovative IAM solutions to enhance security and user experience.
Click here for benefit details related to this position.
Maximum Salary: $161,700.00
VS&Co provides a range of compensation for this role as shown. Your actual salary will be determined by a number of factors, including: your specific skills and experience, geographic region, or other relevant factors.
Your Experience
The IDAM team is looking for a talented and motivated individual with strong technical skills and the ability to rapidly learn about modern technologies. We are looking for an exceptional candidate that shares our passion for operations delivering on processes that support complex security problems, while maximizing productivity and minimizing employee friction.
Basic Qualifications
- 8 - 15 years of related work experience with a bachelor’s degree related field.
- Experience in application enrollments and application access management processes like access request provisioning, user access revalidation/certification.
- Experience with role-based access governance.
- Broad and deep background in all aspects of Identity and Access Management end-to-end lifecycle, from HR driven processes (Joiner, Mover, Leaver, Conversion, User Access Revalidation), to IAM compliance and role engineering.
- Deep technical understanding of authentication protocols SAML 2.0, oAuth 2.0, SCIM
- Deep technical understanding of privileged access management technologies and processes.
- Ability to review and document requirements and implement solutions to address them.
#LI-Remote
#LI-DS1
An equal opportunity employer, we do not discriminate in hiring or terms and conditions of employment because of an individual’s race, color, religion, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, marital status or any other protected category recognized by state, federal or local laws. We only hire individuals authorized for employment in the United States.
