{"id":937630,"url":"https://alion.io/job/cross-river-vp-identity-access-management","title":"VP, Identity & Access Management","company":{"id":673044,"name":"Cross River","domain":"crossriver.com","url":"https://alion.io/company/crossriver","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":8,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":106,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Lee, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":140000,"max_usd":286000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":189},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"ITSM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-06-05T14:30:25Z","employer_posted_date":"2026-08-31","last_verified_at":"2026-11-03T06:57:33Z","board_verified":true,"closed_at":null,"days_open":150,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":150},"description":"Who We Are\nCross River builds the infrastructure behind the world’s most innovative financial products. Our technology and capital solutions power payments, cards, lending, and digital asset capabilities that move money safely, instantly, and inclusively - trusted by leading fintechs, enterprises, and disruptors across the globe.\nOur mission is simple: to build the financial infrastructure that expands access and opportunity for all. Guided by a culture of collaboration, curiosity, and purpose, Cross River has been named one of American Banker’s Best Places to Work in Fintech year after year. Whether you’re designing code, solving regulatory puzzles, or developing strategy, you’ll join a team where innovation and integrity drive everything we do - and where your work helps shape the future of finance.\nWhat We're Looking For\nCross River Bank is seeking a VP of Identity & Access Management (IAM) to build and lead a modern, risk-aligned, and automation-forward IAM program. Reporting to the VP of IT Security Engineering, this strategic and technical leader will drive the design, governance, and execution of IAM capabilities across our cloud, on-premises, and SaaS environments.\nThis role will be instrumental in maturing our identity lifecycle management, enforcing least privilege, and enhancing secure access governance-while ensuring compliance with FFIEC, SOC 2, PCI DSS, and other regulatory standards.\nResponsibilities: \nStrategy & Leadership\nDefine and own the bank’s IAM vision, roadmap, and architecture, aligned with security, compliance, and business goals.\nBuild, lead, and mentor a small but high-performing IAM team, fostering a culture of collaboration, innovation, and accountability.\nChampion secure and scalable IAM practices across business units, product teams, and infrastructure domains.\nPartner with Engineering and Compliance to enhance identity governance maturity.\nLifecycle Management & Automation\nOversee the design and automation of Joiner-Mover-Leaver processes.\nDrive implementation of access request workflows and access reviews through tools like ServiceNow, with tight policy enforcement and auditability.\nReduce identity sprawl by enforcing role-based and attribute-based access controls (RBAC/ABAC).\nSupport federated SSO and MFA rollout across all SaaS applications to eliminate shadow IT.\nPrivileged Access & Governance\nLead the rationalization and control of privileged access across AWS, Azure (PIM), and legacy AD environments.\nPartner with Security Engineering and Audit to execute regular access reviews and design SoD frameworks.\nDefine access certification cycles with actionable outputs for business owners.\nCloud & SaaS Identity\nGuide cloud identity strategies for Azure, AWS, and SaaS ecosystems to ensure secure and scalable access models.\nCollaborate with Engineering to securely onboard new SaaS vendors under centralized identity management and SSO.\nAudit & Compliance\nMaintain IAM controls to meet FFIEC, SOC 2, and PCI DSS standards, and respond effectively to FDIC audits.\nEstablish clear KPIs and metrics for IAM hygiene, access review coverage, and lifecycle automation.\nQualifications: \n10+ years in IAM, Information Security, or IT Risk roles, with 3+ years in a people management or technical leadership capacity.\nHands-on experience with IAM platforms (e.g., SailPoint, Saviynt, Azure AD, CyberArk, Okta), ideally in a financial services or regulated environment.\nDeep knowledge of identity lifecycle automation, JML workflows, RBAC, ABAC, SSO, MFA, and PAM principles.\nProven success aligning IAM strategy with risk, audit, and compliance functions.\nFamiliarity with scripting or automation (PowerShell, Python) and modern identity protocols (SAML, OAuth2, OIDC, SCIM).\nStrong communication, influencing, and documentation skills; able to evangelize IAM to both technical and business audiences.\nExperience implementing or integrating with HRIS systems like Workday and ITSM systems like ServiceNow is a plus.\nCertifications preferred: CISSP, CISM, or vendor-specific IAM certs.\n#LI-AC1 #LI-Hybrid #LI-Onsite \nSalary Range: $180,000.00 - $230,000.00 \nCross River is an Equal Opportunity Employer. Cross River does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.\nBy submitting your application, you give Cross River permission to email, call, or text you using the contact details provided. We will only contact you with job related information.","description_format":"text","description_chars":4687,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Commercial & Retail Banks","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-09-15T15:27:08Z"}],"visa":[],"liveness":{"score":34,"band":"fade","label":"Fading","p_open":1,"p_active":0.767,"p_room":0.44,"age_days":150,"expected_fill_days":106,"reasons":["conf:3","velocity","win:tail","crowd:"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/cross-river-vp-identity-access-management","json_url":"https://alion.io/job/cross-river-vp-identity-access-management.json","meta":{"generated_at":"2026-11-03T10:26:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14515,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673044},"rest":"https://alion.io/mcp/rest/get_company?id=673044"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcross-river-vp-identity-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcross-river-vp-identity-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcross-river-vp-identity-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cross-river-vp-identity-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcross-river-vp-identity-access-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":937630}},{"tool":"search_jobs","arguments":{"company":"crossriver.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":937630},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}