Ingram Micro
Ingram Micro is redefining distribution to maximize value and efficiencies, becoming one of the first in distribution to transform legacy processes.
It's fun to work in a company where people truly BELIEVE in what they're doing!
Ingram Micro is a leading technology company for the global information technology ecosystem. With the ability to reach nearly 90% of the global population, we play a vital role in the worldwide IT sales channel, bringing products and services from technology manufacturers and cloud providers to business-to-business technology experts. Our market reach, diverse solutions and services portfolio, and digital platform Ingram Micro Xvantage set us apart. Learn more at www.ingrammicro.com
Ingram Micro has earned Great Place to Work Certification for 2022-2023 in the United States! This prestigious recognition reflects our commitment to our people and our culture.
Come join our team where you’ll make technology happen in surprising ways. Let’s shape tomorrow - it’ll be a fun journey!
This position is based in our Irvine, California Corporate Headquarters with the opportunity for a hybrid schedule.
Job Description:
We are seeking a highly skilled and experienced System Access Management Manager with expertise on Separation of Duties (SOD) related business risks and rules to enhance the SOD integrity and security of our organization's SOX key systems and data. As the System and Access Management Manager, you will be responsible for working closely with the IT organization and key business leaders in developing, implementing, and overseeing SOD policies, job family risk profiles, access controls, and user permissions to mitigate SOD risks within key SOX-scoped systems.
Responsibilities:
- Develop and implement comprehensive SOD policies, procedures, and controls to prevent conflicts of interest and unauthorized access to sensitive information.
- Design and maintain access management processes, including user provisioning, de-provisioning, access reviews, and role-based access controls (RBAC).
- Develop a comprehensive list of access combinations (rule sets) that would be considered risks to the organization.
- Collaborate with internal stakeholders, including IT, compliance, legal, and business units, to define access requirements and enforce least privilege principles.
- Collaborate with management to identify mitigating controls if conflicts are identified.
- Conduct regular assessments and audits of access rights and SOD configurations to identify violations, weaknesses, and areas for improvement, including a second line defense for monitoring privileged access usage (i.e. firefighter, super users, etc.).
- Monitor access logs, security incidents, and compliance reports to detect anomalies and unauthorized activities, and initiate corrective actions as needed.
- Provide leadership and guidance to the access management team, including training, mentoring, and performance management.
- Serve as a subject matter expert on SOD and access management matters, advising senior management and key stakeholders on risks, controls, and best practices.
- Stay abreast of emerging trends, technologies, and regulatory developments in SOD and access management, and recommend enhancements to policies and procedures.
Requirements:
- Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field. Master's degree and professional certification (e.g., CISSP, CISM, CRIS, CISA) preferred.
- 8-10 years of experience in IT security, access management, SOD, or a related field, with demonstrated expertise in designing and implementing access controls and SOD frameworks.
- Strong understanding of access management principles, methodologies, and technologies, including identity and access management (IAM) solutions.
- Experience in supporting business risk mitigation strategies through the implementation of IT security controls.
- Knowledge of regulatory requirements and industry standards related to access control and SOD, such as SOX, GDPR, HIPAA, and NIST.
- Experience with access management tools and platforms, such as Active Directory, Azure AD, LDAP, SAML, and OAuth.
- Familiarity with SAP GRC with SOD emphasis is a distinct plus.
- Excellent leadership, communication, and interpersonal skills, with the ability to influence and collaborate effectively with diverse stakeholders.
- Proven track record of leading successful access management and SOD initiatives in complex environments.
- Ability to analyze complex problems, prioritize tasks, and drive results in a fast-paced, dynamic organization.
The typical base pay range for this role across the U.S. is USD $125,600.00 - $213,500.00 per year. The ranges above reflect the potential annual base pay across the U.S. for all roles; the applicable base pay range will depend on the candidate’s primary work location, pay grade, and variable compensation plan. Individual base pay within each range depends on various factors, in addition to primary work location, such as complexity and responsibility of role, job duties/requirements, and relevant experience and skills. Base pay ranges are reviewed and typically updated each year. Offers are made within the base pay range applicable at the time of hire. New hires starting base pay generally falls in the bottom half (between the minimum and midpoint) of a pay range.
At Ingram Micro certain roles are eligible for additional rewards, including merit increases, annual bonus or sales incentives and long-term incentives. These awards are allocated based on position level and individual performance. U.S.-based employees have access to healthcare benefits, paid time off, parental leave, a 401(k) plan and company match, short-term and long-term disability coverage, basic life insurance, and wellbeing benefits, among others.
This is not a complete listing of the job duties. It’s a representation of the things you will be doing, and you may not perform all these duties.
Please be prepared to pass a drug test and successfully pass a pre-employment (post offer) background check.
Ingram Micro believes there is no place in our society for social injustice, discrimination, or racism. As a company we do not – and will not – tolerate these actions.
Ingram Micro Inc. is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other protected category under applicable law.
#J-18808-Ljbffr