University Operations:
The University Operations division at UCF is committed to creating a supportive and welcoming environment for our faculty, staff, students, and the broader community. We take pride in delivering exceptional service, sharing our expertise, and upholding the highest standards to ensure a world-class campus experience.
The Opportunity:
University Operations is seeking to hire an Information Security Professional IV, Lead. This role serves as the technical and operational leader for the Identity Governance and Access Management (IGA) function within UCF’s Information Security Office. This position oversees identity security operations, manages a team of security professionals, and leads enterprise-wide initiatives that govern access to university systems, applications, and data. The role provides senior-level leadership for identity lifecycle management, access governance, privileged access controls, compliance initiatives, and security improvements that reduce institutional risk while ensuring users receive appropriate access based on their roles and affiliations.
Responsibilities:
Identity Governance & Access Management Leadership
- Lead the design, governance, and continuous improvement of identity governance and access management services.
- Oversee access request processes, role-based access control (RBAC), entitlement management, authorization standards, and access review programs.
- Ensure identity-related controls support security, compliance, and operational objectives.
Team Leadership & Operations
- Provide day-to-day leadership for the Identity Governance and Access Management team.
- Assign and prioritize work, review deliverables, coach and mentor staff, and support professional development.
- Ensure consistent, high-quality service delivery and operational coverage.
Identity Lifecycle & Access Control
- Serve as the senior technical lead for identity lifecycle processes, including joiner, mover, leaver, guest, affiliate, and sponsored account workflows.
- Provide direction for provisioning, de-provisioning, affiliation management, and access control enhancements.
- Promote secure, timely, and appropriate access across university systems.
Privileged Access Governance
- Provide governance and oversight for privileged accounts, service accounts, machine identities, service principals, and administrative access.
- Establish standards, review exceptions, and support audit readiness activities.
- Ensure high-risk access is appropriately approved, documented, monitored, and reviewed.
Security, Compliance & Risk Management
- Lead security design decisions related to identity and access management controls.
- Evaluate control gaps and recommend solutions that strengthen security and reduce risk.
- Align identity governance practices with institutional policies, compliance requirements, and audit expectations.
Enterprise Application Security
- Provide oversight for access models and authorization controls supporting ERP and other enterprise applications.
- Partner with business units, security teams, and technical stakeholders to improve access governance and application security.
- Help reduce over-provisioning and under-provisioning while supporting business needs.
Reporting, Audits & Continuous Improvement
- Lead reporting and analytical efforts related to identities, roles, entitlements, privileged access, and access review outcomes.
- Support internal audits, compliance reviews, and external assessments through the development of reports and evidence packages.
- Maintain policies, procedures, standards, and knowledge resources while driving continuous process improvement initiatives.
Minimum Qualifications:
Bachelor’s degree and 5 years of relevant experience; or High School Diploma (or equivalent) and 9 years of relevant work experience in lieu of degree or an equivalent combination of education and experience pursuant to Fla. Stat. 112.219(6).
Preferred Qualifications:
- Experience leading Identity Governance and Access Management (IGA) programs in a large, complex organization.
- Experience with identity lifecycle management, role-based access control, and access review processes.
- Knowledge of privileged access management (PAM), identity governance, and authorization frameworks.
- Experience supporting ERP and enterprise application security.
- Familiarity with security governance, compliance, risk management, and audit activities.
- Experience supervising or leading technical security teams.
- Strong analytical, communication, and stakeholder engagement skills.
Special Instructions to the Applicants:
Position requires a valid Class E driver’s license. This position may involve driving to various locations on and off campus to conduct University business.
The anticipated salary range for this position is $104,664 - $125,000. The final salary will be determined based on the candidate's qualifications, experience, and internal equity considerations.
All applicants must be authorized to work for any U.S. employer. Visa sponsorship is not available for this position, and the university cannot accommodate H‑1B transfers or employment-based visa processing for individuals currently sponsored by another employer.
This role requires the successful candidate to work on-site at UCF as their primary work location. On-site presence is an essential function of this role.
Department:
UCF IT Information Security Office
Work Schedule:
Monday - Friday, 8:00am - 5:00pm
Type of Appointment:
Regular
Unless explicitly stated on the job posting, it is UCF’s expectation that an employee of UCF will reside in Florida as of the date the employment begins.
The University of Central Florida is an equal opportunity employer that does not discriminate against any employee or applicant for employment based on any characteristic protected by law. The University maintains programs for protected veterans and individuals with disabilities in accordance with all applicable federal and state laws.
As a Florida public university, the University of Central Florida makes all application materials and selection procedures available to the public upon request.