Senior Manager, Identity & Access Management

Viatris is a global healthcare company uniquely positioned to bridge the traditional divide between generics and brands, combining the best of both to more holistically address healthcare needs globally. With a mission to empower people worldwide to live healthier at every stage of life, we provide access at scale, currently supplying high-quality medicines to approximately 1 billion patients around the world annually and touching all of life's moments, from birth to the end of life, acute conditions to chronic diseases.

We have been included on number of award lists that demonstrate the impact we are making.

Every day, we rise to the challenge to make a difference and here’s how the Senior Manager, Identity & Access Management will make an impact:

The primary purpose of the Senior Manager, Identity & Access Management (IAM), is to lead the strategy, delivery, and maturation of enterprise identity security capabilities across Viatris systems, applications, cloud environments, and privileged technology resources. The role defines and drives standardized, automated identity controls across authentication, privileged access, access governance, directory services, and identity lifecycle management. The role partners with Cybersecurity, IT, Cloud, Infrastructure, HR, and application teams to reduce fragmented and manual identity processes while strengthening a sustainable operating model for a foundational enterprise security capability. The role develops internal leadership depth through deliberate knowledge transfer, succession planning, and coaching while reducing security risk from inconsistent or excessive access and operational cost from decentralized identity-management practices.

Key responsibilities for this role include:

• Lead development and execution of the enterprise IAM strategy, roadmap, and capability maturity plan across authentication, privileged access, access governance, and identity lifecycle services.
• Set identity security architecture direction and implementation standards for workforce identities, privileged accounts, service accounts, application access, and cloud identity integrations.
• Define reusable IAM patterns, reference designs, control standards, and implementation approaches that enable secure and consistent identity adoption across enterprise platforms.
• Establish automated and policy-driven identity controls for joiner, mover, leaver, access request, access review, and privileged-access processes.
• Lead identity risk reviews, access governance assessments, and senior-level risk discussions for critical systems, privileged technology resources, and high-risk access scenarios.
• Define identity security assurance approaches that identify excessive access, orphaned accounts, privilege misuse, weak authentication, and lifecycle control gaps.
• Direct the use and maturation of IAM, IGA, PAM, directory, MFA, SSO, federation, and identity analytics capabilities to validate control effectiveness and drive remediation.
• Manage a portfolio of IAM programs from requirements through design, implementation, maturation, operational transition, and continual service improvement.
• Assess enterprise IAM capability gaps and sponsor practical implementation roadmaps with Cybersecurity, IT, Cloud, Infrastructure, HR, and application stakeholders.
• Drive adoption of automated, repeatable, and policy-driven IAM practices across access provisioning, deprovisioning, certification, privileged access, and authentication processes.
• Advise technology teams and Cybersecurity leadership on identity security priorities, risk tradeoffs, service improvements, platform investments, and operating model decisions.
• Lead, coach, and develop IAM professionals while establishing knowledge transfer, succession planning, and sustainable coverage for critical identity security capabilities.
• Develop cybersecurity countermeasures, identity risk mitigation approaches, and implementation guidance aligned to technology and business requirements.
• Maintain senior stakeholder communication and cross-team relationships required for successful IAM delivery, prioritization, and operational adoption.
• Sponsor configuration and change management practices for IAM capabilities throughout implementation, transition, and ongoing operation.
• Assess the effectiveness of identity security controls for services, applications, privileged technology resources, and associated processes, and drive measurable improvement.
• Ensure technical documentation, operating procedures, access standards, and knowledge transfer artifacts support sustainable operation and succession planning.

The minimum qualifications for this role are:

• Minimum of a Bachelor's degree required. Master’s degree preferred.
• Specialization in Education: MIS, IT, Engineering, Computer Science, Cybersecurity, or related field, however, a combination of experience and/or education will be taken into consideration.
• 8 years’ experience with IAM, Cybersecurity, Infrastructure, Cloud Engineering, or Application Security required.
• CISSP, CISM, Microsoft identity, IGA, PAM, or identity platform certification preferred.
• Knowledge of identity and access management concepts, architectures, operating models, and governance practices.
• Knowledge of cybersecurity and privacy principles, including how they apply to authentication, authorization, access governance, and privileged access.
• Knowledge of risk management processes and methods for assessing, prioritizing, and mitigating enterprise identity security risk.
• Knowledge of authentication, authorization, federation, single sign-on, multi-factor authentication, and access control methods.
• Knowledge of IAM, IGA, PAM, directory services, identity lifecycle management, and secure architecture principles.
• Knowledge of identity security requirements across cloud platforms, applications, infrastructure, privileged technology resources, and third-party access scenarios.
• Knowledge of automation, workflow, API integration, and policy-driven provisioning and deprovisioning practices.
• Knowledge of identity analytics, access certification, entitlement management, privileged session controls, and service-account governance.
• Skill in assessing identity security controls, control maturity, and residual risk based on cybersecurity principles and tenets.
• Skill in communicating complex identity, access, operational, and risk concepts to technical teams, business stakeholders, and Cybersecurity leadership.
• Skill in creating strategic roadmaps, decision materials, technical standards, operating procedures, and documentation that support sustainable IAM services.
• Skill in directing automation, scripting, API integration, workflow, and policy-based access control approaches commonly used in IAM environments.
• Skill in analyzing access, entitlement, account, configuration, interoperability, and control testing results to support risk-based decisions.
• Skill in evaluating, selecting, implementing, and maturing IAM, IGA, PAM, MFA, SSO, federation, directory, and identity analytics capabilities.
• Skill in identifying identity security weaknesses, prioritizing remediation, and driving risk reduction through cross-functional delivery.
• Ability to translate technical and business requirements into scalable IAM operating models, services, controls, and measurable outcomes.
• Ability to influence Infrastructure, Cloud, HR, application development, Cybersecurity, vendor, and business teams without relying solely on direct authority.
• Ability to lead people, coach technical talent, manage priorities, and apply cybersecurity principles to confidentiality, integrity, availability, authentication, and non-repudiation requirements.

Exact compensation may vary based on skills, experience, and location. The salary range for this position is $95,000.00 - $193,000.00 USD.

At Viatris, we offer competitive salaries, benefits and an inclusive environment where you can use your experiences, perspectives and skills to help make an impact on the lives of others.

Viatris is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, gender expression, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Originally posted on Himalayas