Information Security Manager-IAM

MathWorks - Natick, MA

Full-time - Mid Level

Hybrid - Natick, MA

Publishing Industries

About the position

The Information Security Manager role at MathWorks focuses on overseeing and managing the Identity and Access Management (IAM) programs and strategy. This includes managing privileged account management, security awareness, and phishing initiatives across the organization. The ideal candidate will have a strong background in information security, excellent leadership skills, and a proactive approach to safeguarding the company's digital assets. The role involves leading a diverse team of IT Security Analysts and ensuring the effective execution of IT Security initiatives.

Responsibilities

• Oversee and manage IAM programs and strategy including privileged account management and security awareness initiatives.
• Facilitate the use of technology-based tools to implement a strong IAM program that balances access with compliance and confidentiality.
• Identify and evaluate complex business and technology risks and internal controls.
• Act as a subject-matter-expert on IAM disciplines including identity governance and administration, access management, and privileged access management.
• Provide management status reporting on IAM activities and ensure milestones are achieved within deadlines.
• Own the lifecycle management of all IAM technologies and associated infrastructure.
• Align IAM processes across the organization and develop standards for use.
• Collaborate with IT and other departments to integrate IAM solutions with existing systems.
• Design and deliver security awareness training programs for employees and conduct regular phishing simulations.
• Manage team operational and project tasks using Kanban and sprint planning boards.

Requirements

• Bachelor's degree and 7 years of professional work experience (or equivalent experience) required.
• 2 years of management experience required.
• Proven experience with operational management in diverse environments.
• Experience implementing security processes within CI/CD pipelines for cloud-native applications.
• Strong analytical skills and ability to work with teams on complex security tasks.
• Understanding and experience with NIST CSF, SOC2, ISO27001, NIST SP800-171, and NIST SP800-53.
• Experience with Ping Federation, SailPoint, and other identity access management solutions.
• Knowledge of Information Security best practices and IAM principles.

Nice-to-haves

• Professional certifications such as CISSP, CISM, or CISA are highly desirable.
• Knowledge and experience in managing and implementing data security, data masking, and data loss prevention programs.

Benefits

• Hybrid work model allowing flexibility between office and home.
• Opportunities for professional development and growth.
• Supportive work environment that values diversity and teamwork.