Identity and Access Management Ops Manager

Job description

We Put the World on Vacation

Travel + Leisure Co. is the world’s leading vacation ownership and travel membership company, with a dynamic and growing portfolio of resort, travel club, and lifestyle travel brands.

Our dedicated associates help the company achieve its mission to put the world on vacation.

Innovation and growth keep our work interesting and fun.

Every day is a chance to learn something new and turn vacation inspiration into exceptional experiences for millions of travelers worldwide.

The primary function of the Manager, Identity and Access Management (IAM) Operations is to be responsible for the leading and managing the IAM operations, engineering, and governance teams.

This would be primarily related, but not limited to, identity management in the SailPoint LifeCycle Manager, Okta product suite and Cyberark privilege access management.

Additionally, this position will participate in managing the end-to-end Identity Management and access customer experience across the Travel + Leisure Co enterprise.

This will include managing digital IDs for employees, contractors, and vendors across multiple domains and platforms to maintain compliance with regulatory governance.

How You'll Shine:

• Design, develop, document, analyze, test, and/or modify new software systems part of the IAM Toolset; including SailPoint LifeCycle Manager, Okta and Cyberark platforms.


• Work with users and developers to analyze requirements of software applications to bring them into request process, IAM, and certification platform.


• Assists project teams with the design and implementation of user access roles at the application and technology infrastructure levels as necessary.


• Frequently exercise discretion and independent judgment whether system or access level changes meet regulatory and statutory compliance requirements.


• Manage the IAM team through general troubleshooting of access related issues.


• Contributes to Enterprise Information Security team effectiveness by assisting in the strategic direction of the IAM program.


• Assists the Business and HR to determine employee or third party/vendor level of access and status (manually or via automated workflows).


• Assist auditors as needed to ensure compliance.
  
  Participates in periodic compliance audits (i.e. access recertification) in conjunction with risk and compliance management capability for PCI, SOX, PII and BCP/DR related systems.


• Participates remediation activities in response to access recertification, audit and/or assessment findings pertaining to inappropriate user access.


• Perform regular maintenance of application data, documentation, and record keeping data.


• The IAM Manager will perform their duties under minimal supervision, exercising autonomy to review and fulfill their duties within the scope of their position.


• Responsible for the daily management, direction, and workload of the Wyndham Identity and Access Management personnel.


• Organizes and tracks team projects.


• Ensure department SLAs are met and reporting KPI to Management is performed on a regular basis.


• Provides operational reporting by practice areas on support investment such as average queue depth, incident and request resolution times, and system capacity.


• Manages relationships with external vendors for IAM functions.


• Participates in the organization of after-hours maintenance efforts.


• Develops and IAM policy and documentation standards across the organization.

What You'll Bring:

• Bachelor’s degree in IT field or equivalent experience is preferred


• Any certifications around the specific IAM tools utilized by Wyndham (SailPoint, Okta, Cyberak etc.) are a plus.


• People skills:
  
  
  • Ability to coordinate, work with and gain the trust of business stakeholders, technical resources, and third-party vendors.
  
  
  • Able to work under pressure in time critical situations.
  
  
  
  


• Process Skills:
  
  
  • Strong attention to detail in conducting analysis combined with an ability to accurately record full documentation in support of IAM processes.
  
  
  • Detailed knowledge of current regional and international best practices in the IAM arena.
  
  
  
  

• Communication Skills:
  
  
  • Excellent written and verbal communication skills are required.
  
  
  • Ability to communicate effectively with business representatives in explaining impacts and strategies and where necessary, in layman's terms.
  
  
  
  


• Fundamental understanding of Microsoft’s Active Directory structure including Organizational Units, User Accounts, Group Memberships, and access rights.


• Strong knowledge of Single Sign-On and Authentication and Authorization Services such as SAML 2.0, OpenID, and Kerberos


• Demonstrated ability to work under pressure, possess good written and oral communication skills, attention to detail, and be self-motivated


• In depth knowledge of share, file, and folder permissions in Microsoft Windows


• Strong knowledge in LDAP and Active Directory Services


• Ability to analyze business processes to improve security assurance posture of the department.


• Ability to work independently to achieve departmental objectives


• Understanding of operating system level security and user access audit logging


• Some experience with account management within Unix


• General knowledge of Microsoft Exchange


• Fundamental knowledge of SOX/PCI/PII regulations


• This role will have supervisory responsibilities.
  
  As such, the individual must have a minimum of 3 years’ experience in the area of team/vendor management.

How You'll Be Rewarded:

We offer a diverse range of comprehensive health and welfare benefits to associates who work 30 or more hours per week to meet your needs and support you throughout your career with us.

Travel + Leisure Co. benefits include:

Note: Temporary and/or seasonal associates are ineligible for Paid Time Off.

• Medical


• Dental


• Vision


• Flexible spending accounts


• Life and accident coverage


• Disability


• Depending on position, paid time off, parental leave and holidays (speak to your recruiter for additional information)


• Wish day paid time to volunteer at an approved organization of your choice


• 401k with employer match (subject to eligibility requirements, including tenure - speak to your recruiter for additional information)


• Legal and identify theft plan


• Voluntary income protection benefits


• Wellness program (subject to provider availability)


• Employee Assistance Program

Where Memories Start with You

Hospitality is at the heart of all we do at Travel + Leisure Co. Here, you’ll find an inclusive environment where we deliver excellence and take time to have fun, celebrate together, and support one another.

We're always looking ahead to what’s next and how we can strengthen our business, its neighboring communities, and the customer experience.

Join our global team and build a career where memories start with you.

We are an equal opportunity employer, and all applications will be considered for employment without attention to their membership in any protected class.

Required Skill Profession

Computer Occupations