Role Overview

In this role, the senior and tenured candidate will lead the security identity management and compliance efforts by implementing repeatable and consistent processes. As a startup, there will be many opportunities to set the direction and build from scratch. Moving fast while delivering will be key in this role and will require good time management, a sense of urgency, and big picture thinking.

Responsibilities:

• Drive identity and access management
• Drive SOC 2 Type II compliance enforcement efforts on external facing and internal products
• Responsible for and lead compliance projects 
• Perform day-to-day operational security activities
• Educate and advocate for security best practices within the organization
• Work with software engineers to proactively identify and fix compliance issues
• Design access architectures for internal products and drive its implementation to protect Turing’s networks and systems
• Conduct access reviews of core corporate and production infrastructure
• Engineer solutions to ensure that IAM solutions and services perform according to defined processes, meet defined policies, and comply with information security requirements
• Integrate IAM systems with in-house and third party applications for provisioning, identity authentication
• Evaluate, develop and implement secure IAM solutions, based on approved enterprise security architectures
• Manage the work flow within IAM including access provisioning, compliance, access management (including privileged accounts) and other functions in information security
• Plan and manage access certification, RBAC & SoD related initiatives
• Provide advice to teams for IAM related settings, policies, and design configurations

Qualifications Needed:

• • Bachelor's degree in Computer Science, similar technical field of study, or equivalent practical experience
  • 8+ years of relevant Security Engineering and/or Identity and Access Management experience
  • Proven track record of successful IAM implementations and support of those applications
  • Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate actions.
  • Thorough, detail-oriented and quality-driven with excellent communication and interpersonal skills
  • Relevant industry training and/or certification preferred
  • Able to deliver quality results in a high-energy/high-pressure environment
  • Ability to perform duties with minimal supervision
  • Extensive experience with the design and configuration of Third Party integrations leveraging SAML
  • Experience with SOC 2 controls process and other standards like ISO, NIST, PCI & HIPAA
  • Knowledge on applicable laws and regulations like GDPR, CCPA.etc & implementing best practices for compliance
  • Experience in compliance automation
  • Operational experience in designing and implementing access architectures
  • Tooling experience: Okta, Google Workspace, enterprise Identity Management solutions (e.g. CyberArk)
  • Change management experience
  • Excellent communication skills, both written and verbal