Information Security Analyst: Lead- IAM Authentication Product Owner
Summary: The IAM Authentication Product Owner is responsible for the strategic direction, roadmap execution, and operational management of enterprise authentication services. This role acts as the liaison between business stakeholders, engineering teams, cybersecurity, and operations to ensure secure, scalable, and user-friendly authentication solutions. The ideal candidate will have extensive experience in identity and authentication services within large, highly regulated organizations, particularly in financial services.
Responsibilities:
Own the product lifecycle, roadmap, and backlog for enterprise authentication services, including Microsoft Entra ID, Active Directory, Okta, MFA, SSO, Windows Hello for Business (WHfB), and password management.
Partner with business, security, engineering, and infrastructure teams to define requirements, prioritize work, and deliver secure and compliant authentication capabilities.
Drive identity modernization initiatives, including cloud authentication adoption, Conditional Access, self-service password reset (SSPR), and authentication platform migrations.
Manage authentication and directory-related risks by ensuring alignment with cybersecurity policies, regulatory requirements, audit controls, and identity governance standards.
Lead operational excellence efforts by monitoring platform health, resolving product issues, and driving continuous service improvements.
Establish and maintain authentication standards, onboarding patterns, and governance processes for new applications and enterprise identity services.
Coordinate with vendors, architects, and engineering teams to evaluate new capabilities and ensure successful delivery of authentication initiatives.
Define and track key performance indicators (KPIs) such as authentication availability, MFA adoption, password reset reduction, and user satisfaction.
Required Skills:
10+ years of experience in identity and authentication services within large, highly regulated organizations, preferably financial services.
Deep knowledge of enterprise workforce authentication technologies, including Active Directory, Microsoft Entra ID, Okta, MFA, SSO, password management, SSPR, Conditional Access, Windows Hello for Business, FIDO2/passkeys, and identity governance capabilities.
Experience supporting and governing platforms such as Active Directory, Microsoft Entra ID, Okta Identity Provider, and Password Management Platforms.
Understanding of hybrid identity environments, password lifecycle management, credential security best practices, and identity governance and access controls.
Strong agile delivery practices and a customer-focused mindset.