Director, Identity Security Job at Ecolab, Saint Paul, MN

  • Ecolab
  • Saint Paul, MN

Job Description

Job Summary: The Director of Identity is responsible for maturing the enterprise Identity and Access Management (IAM) program across strategy, engineering, operations, architecture, and emerging identity security capabilities. This role provides leadership for a global IAM function supporting a large-scale internal and external identity environment and is accountable for advancing identity governance, privileged access, authentication, lifecycle management, and secrets and cryptography capabilities in alignment with business, risk, and compliance requirements.The role combines strategic direction, operational accountability, organizational leadership, and program execution. The Director of Identity will lead mature identity services while driving transformation initiatives such as IAM governance maturation, role-based access control, PAM modernization, passwordless authentication, certificate lifecycle automation, and enterprise secrets management.What You Will Do:Strategy, Governance, and LeadershipDefine and own the enterprise IAM strategy, roadmap, and operating model aligned to cybersecurity, compliance, and business objectives.Mature the IAM program through formal governance, policies, standards, controls, metrics, and leadership reporting.Present IAM program status, risks, priorities, and investment needs to security leadership and executive stakeholders.Lead prioritization decisions across operations, platform engineering, architecture, and project-based identity initiatives.Establish and monitor KPIs, service performance, maturity goals, and program outcomes.IAM Program DeliveryLead delivery of enterprise IAM capabilities including identity lifecycle management, joiner/mover/leaver processes, access provisioning, access requests, access reviews, privileged access, authentication, federation, and directory services.Oversee transformation initiatives such as IGA expansion, RBAC governance, PAM modernization, passwordless authentication, and identity security posture improvements.Ensure IAM services meet operational expectations for reliability, resilience, scalability, and user support.Partner with application, infrastructure, cloud, HR, audit, and security teams to implement identity controls and integration patterns across the enterprise.Compliance, Risk, and Control EffectivenessEnsure IAM processes and controls support audit, regulatory, and internal compliance requirements, including SOX-related controls where applicable.Oversee audit readiness, remediation activities, control evidence, and policy enforcement across identity-related processes.Align identity capabilities to recognized frameworks and standards such as NIST CSF 2.0, NIST 800-63, and enterprise security policies.Reduce identity-related risk by strengthening governance, control automation, privileged access protections, and secrets management practices.Architecture and Emerging Identity Security CapabilitiesProvide leadership across identity architecture, platform standards, and integration patterns for workforce, privileged, and customer identity environments.Lead the development of enterprise secrets and cryptography capabilities, including certificate lifecycle management, PKI modernization, vault strategy, and operational controls.Support modern identity approaches across hybrid and cloud environments, including federation, conditional access, and non-human/service identity considerations.Drive decisions on tooling, architectural direction, and strategic vendor partnerships that improve security, scalability, and operational efficiency.Organizational and People LeadershipLead and develop a distributed IAM organization consisting of managers, architects, engineers, and operations personnel.Build organizational clarity across operations, engineering, architecture, and new capability areas.Provide leadership in talent development, succession planning, coaching, performance management, and team engagement.Manage staffing strategy across full-time employees, partners, and contingent resources to meet delivery needs.Oversee third-party vendors and consulting partners supporting IAM programs and services.Minimum Qualifications:Bachelor's degree in Information Technology, Information Security, Computer Science, Engineering, or a related discipline; equivalent experience may be considered.12+ years of progressive experience in Identity and Access Management, cybersecurity, or security engineering.5+ years of leadership experience managing multi-team IAM functions at the Senior Manager or Director level.Demonstrated success leading enterprise IAM programs across strategy, operations, engineering, governance, and transformation initiatives.Experience owning IAM governance, policy development, audit response, executive reporting, and control maturity efforts.Experience building or standing up new security capabilities, teams, or services.Technical and Functional Qualifications:Strong knowledge of Identity Governance and Administration platforms; Saviynt preferred. Experience with SailPoint or One Identity is also relevant.Strong knowledge of Privileged Access Management concepts and platforms; BeyondTrust preferred, with CyberArk or Delinea also relevant.Experience with Microsoft identity services including Active Directory, Entra ID, B2C, federation, and conditional access.Knowledge of authentication and federation standards such as SAML, OAuth 2.0, and OpenID Connect.Understanding of hybrid and cloud IAM patterns across Azure, AWS, and GCP environments.Knowledge of secrets management, PKI, certificate lifecycle management, and key management technologies such as HashiCorp Vault or Azure Key Vault.Familiarity with IAM maturity frameworks, security governance models, and regulatory or control expectations.Preferred QualificationsExperience in a Fortune 500, global, manufacturing, or industrial environment.Experience with SOX-related IAM controls and certification processes.Experience with ServiceNow-based access workflows and Workday-driven provisioning processes.Relevant certifications such as CISSP, CISM, or identity-platform specific certifications.Leadership CompetenciesStrategic thinker with the ability to set direction and translate strategy into execution.Strong decision-maker who operates effectively in complex, matrixed environments.Delivery-oriented leader with a strong focus on accountability, outcomes, and service quality.Effective communicator able to translate complex identity and security topics for executives, audit stakeholders, and technical teams.Strong collaborator with the ability to influence across cybersecurity, infrastructure, cloud, HR, audit, and application teams.Proven people leader with the ability to coach talent, build teams, and develop future leaders.Additional InformationThe role may require coordination across global teams, including off-hours support for key initiatives, escalations, or major incidents.Annual or Hourly Compensation RangeThe base salary range for this position is $137,400.00 - $206,200.00. This position is eligible for annual bonus and long-term incentives based on performance, per plan terms. Many factors are taken into consideration when determining compensation, such as experience, education, training, geography, etc. We comply with all minimum wage and overtime laws.BenefitsEcolab strives to provide comprehensive and market-competitive benefits to meet the needs of our associates and their families. Click here to see our benefits. If you are viewing this posting on a site other than our Ecolab Career website, view our benefits at jobs.ecolab.com/working-here.Potential Customer Requirements NoticeTo meet customer requirements and comply with local or state regulations, applicants for certain customer-facing roles may need to:- Undergo additional background screens and/or drug/alcohol testing for customer credentialing.Americans with Disabilities Act (ADA)Ecolab will provide reasonable accommodation (such as a qualified sign language interpreter or other personal assistance) with our application process upon request as required to comply with applicable laws. If you have a disability and require accommodation assistance in this application process, please visit the Recruiting Support link in the footer of each page of our career website. SummaryLocation: USA - Minnesota - Saint Paul; USA - Illinois - NapervilleType: Full time

Job Tags

Hourly pay, Minimum wage, Full time, Local area

Similar Jobs

Confidential

ESL Teacher Job at Confidential

 ...College / College for International Cooperative Programs Job Rank: Lecturer Position Summary: Deliver 18-20 class hours of teaching per week (1 class hour = 45 minutes). Participate in and lead activities within the teaching and research group. Assist in the... 

Bellevue School District

Event and Activity Staff Job at Bellevue School District

 ...COMMITMENT TO EQUITY: The Bellevue School District is committed to a diverse workforce representative of our students, one that embraces and models cultural competency...  ...Reports to and is directly supervised by the High School Athletic Director. EDUCATION... 

ABC Education

Host Family - F1 International High School Students Job at ABC Education

 ...Job Description Job Description Host Family - F1 International High School Students We are a thriving international education organization supporting students from 30+ countries. Were seeking caring, reliable host families to join our community as FullTime Hosts... 

Freddie Mac

Multifamily Digital Product Analysis Intern - Summer 2027 Job at Freddie Mac

 ...At Freddie Mac, our mission of Making Home Possible is what motivates us, and it's at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes... 

City of Hope

Acupuncturist - Integrative Oncology Job at City of Hope

 ...ensuring medically safe practices, compliance with infection control, and maintaining necessary supplies. Additionally, they will assist with administrative tasks such as participant forms and evaluations while adhering to all City of Hope policies and procedures.As a...