Position Description

Reporting to the Harvard Medical School CISO, the Director of IT Risk Management and IAM will have responsibility for designing, supporting, and managing IAM and IT Risk Management for all of Harvard Medical School and Harvard School of Dental Medicine. The role is part managerial and part technical expert. This role will closely partner with others across HMS IT and Security to further enable the HMS mission through Identity, Access, and IT Risk Management. The Director of IT Risk Management and IAM, as part of IT-Security leadership team, will set the strategic and tactical roadmaps for IAM, IT Risk Management, and Data Security. Furthermore, this position oversees all relevant data management functions required for security, IAM, and IT Risk Management functions including data security for HMS. 

Key responsibilities include the following: 

• Oversee all Identity Security / IAM  and develop related solutions where needed
• Oversee IT Risk Management inclusive of GRC
• Oversee Active Directory Security, Audit, and Compliance
• Develop and lead IAM and IGA strategies that ensures identity governance and streamlines user authentication and authorization
• Oversee Identity Governance and Privileged Access Management including for any HMS Secure Enclaves
• Oversee HMS IT Asset Management with a focus on Security needs
• Lead the HMS IT Governance, Risk, and Compliance program
• Coordinate with the appropriate IT governance committees on data security, IAM, and related policies and policy approvals
• Manage the HMS IT security exception process
• Stay on top of latest developments in IAM, information security, industry trends, security risks, and best practices

Basic Qualifications

• Minimum of seven years’ post-secondary education or relevant work experience
• Supervisory experience

Additional Qualifications and Skills

• Minimum three years’ demonstrated highly specialized knowledge of a specific technology
• Knowledge of Microsoft Office Suite, advanced excel skills
• Familiarity with domain structures, user authentication, and digital signatures, firewall theory and configuration, in-depth knowledge of intrusion detection and internet architecture
• Knowledge of advanced IT security principles
• Demonstrated experience with systems and data query tools
• Demonstrated team performance skills, service mindset approach, and the ability to act as a trusted advisor

Additional Information

This position is based in Boston and some in-person on-campus work will be required, and flexible/remote work is an option. Any remote work must be performed in a state in which Harvard is registered to do business (CA*, CT, GA, IL, MA, MD, ME, NH, NJ, NY, RI, VA, VT, and WA). Individual flexible and remote work options for this role will be discussed during the interview process. *Note: Harvard employees working in California must be exempt.

Harvard University continues to place the highest priority on the health, safety, and well-being of its faculty, staff, and students, as well as the wider community. Please note that all new employees will be required to complete an attestation of having received their primary series COVID-19 vaccination prior to hire, as detailed on our COVID-19 Vaccine Requirement Webpage. Individuals may request exemption from the vaccine requirement for medical or religious reasons prior to completing the hiring process. Additional information regarding this requirement, exemptions, verification of vaccination status, and other related policies and resources may be found on the University’s COVID-19 Information Website.

Please note that we are currently conducting a majority of interviews and onboarding remotely and virtually. We appreciate your understanding.

The Harvard Medical School is not able to provide visa sponsorship for this position.

Not ready to apply? Join our talent community to keep in touch and learn about future opportunities!
 

Commitment to Equity, Diversity, Inclusion, and Belonging

We are committed to cultivating an inclusive workplace culture of faculty, staff, and students with diverse backgrounds, styles, abilities, and motivations. We appreciate and leverage the capabilities, insights, and ideas of all individuals. Harvard Medical School Mission and Community Values

EEO Statement

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, gender identity, sexual orientation, pregnancy and pregnancy-related conditions, or any other characteristic protected by law.