Director of Identity and Access Management (IAM)

The Director of Identity and Access Management (IAM) role provides strategic and operational leadership for Medtronic's enterprise Identity & Access Management program. The Director will establish and execute the IAM strategy, oversee identity governance and privileged access capabilities, modernize identity services, and partner across the enterprise to reduce risk while enabling secure business operations and digital transformation.

Primary Responsibilities

• Define and execute the enterprise Identity and Access Management strategy, roadmap, and operating model aligned with cybersecurity, technology, and business priorities.
• Lead the end-to-end IAM portfolio, including workforce identity, identity governance and administration, privileged access management, authentication, authorization, and identity lifecycle services.
• Establish and maintain IAM architecture standards, policies, controls, and governance processes across global business and technology environments.
• Drive modernization of identity services through capabilities such as single sign-on, multifactor authentication, conditional access, role-based access controls, and least-privilege access models.
• Partner with technology, business, compliance, audit, privacy, and security stakeholders to integrate identity controls into enterprise processes and platforms.
• Oversee identity-related risk management, control remediation, audit responses, and incident response activities involving access misuse, credential compromise, or unauthorized access.
• Develop service management, vendor management, financial planning, performance metrics, and continuous improvement practices for IAM products and services.
• Build, lead, and develop a high-performing team while establishing clear accountability, delivery expectations, and operational excellence standards.

Required Qualifications

• 10+ years of experience with a bachelor's degree or 8+ years of experience with an advanced degree
• 7+ years of managerial experience
• Leadership experience in Identity and Access Management, cybersecurity, infrastructure security, or a closely related discipline within a large, complex organization.
• Demonstrated experience leading enterprise-scale Identity and Access Management transformation initiatives across multiple business units, regions, and technology environments.
• Experience developing and implementing Identity and Access Management strategies, governance frameworks, and operating models that support business objectives and risk management requirements.
• Strong expertise in identity governance, authentication, authorization, privileged access management, access certification, identity lifecycle management, and least-privilege principles.
• Experience communicating technical risk, investment priorities, and program outcomes to executive leadership and key stakeholders.

Preferred Qualifications

• Master's degree in Cybersecurity, Information Systems, Business Administration, or a related field.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Cloud Security Professional (CCSP), or comparable identity and cloud security certifications.
• Experience with enterprise Identity and Access Management platforms, Identity Governance and Administration (IGA), Privileged Access Management (PAM), Customer Identity and Access Management (CIAM), and Cloud Infrastructure Entitlement Management (CIEM) solutions.
• Experience implementing phishing-resistant authentication, conditional access, zero-trust access models, device trust, and modern authorization frameworks.
• Experience supporting regulated industries with complex compliance, privacy, security, and audit requirements, including healthcare, medical technology, or similarly regulated environments.