Sr. Manager, Information Security & Risk

We are currently seeking an Information Security Operations Lead to join our Information Security and Risk team (ISR). In this role, you will manage Addepar’s local Pune Information Security team which focuses on Identity & Access Management (IAM) and partner with various team members throughout the company including HR, Security Engineering, IT, and others. 

You will be responsible for managing a team that is responsible for an off-the-shelf IGA/IDM solution that works with existing toolsets to maintain and improve the employee experience and deliver modern access controls in this cloud first environment. 

• Partner closely with ISR team leadership to drive identity and access management strategy throughout the organization.
• Collaborate with various technology and people teams to understand the status quo and drive efficiencies and improvements.
• Implement access and identity technology (IGA/PAM) improvements and processes and on-boarding existing consumer SaaS and in-house systems for employees.
• Drive value through the IAM program by introducing automation, RBAC/ABAC, access reviews, etc.
• Assist with the implementation of Addepar’s zero-trust journey.
• Provide managerial support for the IAM tools as necessary.
• Manage and mentor local ISR team members driving career growth and progression
• Have an opportunity to build out and manage other aspects of Information Security in the future such as Security Operations.  

• Minimum 10+ years progressive experience within an information security function including time working in or with IAM teams.
• Minimum 3+ years in a management role
• In-depth knowledge and technical experience with leading IGA/IDM tools, authentication and authorization protocols/methodologies.
• Experience with configuring/designing/developing IGA processes with custom connectors.
• Knowledge of Okta, AWS or similar CSPs and IDPs (Strong AWS knowledge and architectural experience is a plus).
• Experience with collecting data, performing analysis and promoting data driven decision making.
• Consistent track record of collaborating with technical teams to achieve information security goals.
• Strong communicator who can deliver technical requirements and also summarize in non-technical terms.
• Curious, always learning and deeply interested in cybersecurity.
• Experience in the GRC (Governance,Risk Compliance) space is a huge plus.
• Self-starter with proactive problem solving skills
• Experience with Incident Response and Security Operations is a huge plus.

Important Note - This role requires working from our Pune office 3 days a week (Hybrid work model)