Identity and Access Management Director - The University of Chicago Medicine

Job Description

Join a world-class academic healthcare system, UChicago Medicine, as the Identity and Access Management Director responsible for directing the strategies of the UChicago Medicine Identity and Access Management team.

The Identity & Access Management (IAM) Director has the responsibility of managing the IAM program for the entire Health System, inclusive of UChicago Medicine and Ingalls Memorial. The Director is responsible for building, leading, and executing the Health Systems IAM strategies and initiatives. The IAM Director will develop and drive the execution of standard automated and self-service driven processes to enhance the productivity of the Health System workforce while also enhancing its security posture. In this position, you will work collaboratively with other peers and stakeholders and influence technical and business projects to adopt the build IAM strategies. Additionally, you will identify and execute on strategies core to internal business processes as well as partnering with external business partners, clients, and patients to securely ease their digital access into the UChicago Medicine Health System. In this position, you will report directly to the Deputy Chief Information Security Officer and will oversee all aspects of a large-scale healthcare IAM program, aligned with the University’s IAM program. 

Who you are:

A collaborative and transformational leader striving to improve the enterprise system’s security with:

• Bachelor’s degree in Computer Science, Engineering, or equivalent education, training or work experience; Master’s degree preferred.
• A minimum of thirteen (13) years related cyber security, identity and access management or Information Technology experience with a minimum of five (5) years of management experience with direct responsibility for Information Security or Identity and Access Management.
• Extensive experience with IAM operations, development, engineering, architecture, auditing, and delivery including operational management methodologies leveraging ITSM principles and DevOps.
• Demonstrated knowledge of threats, risk analysis and the development of security systems, and protocols as well as technologies including password vaulting solutions, electronic record management, and identity access management tools.
• Understanding software development principles for the establishment of new technology capabilities and functionality, the engineering principles for running and managing technology platforms necessary to deliver IAM capabilities, and delivery principles for ensuring the timely release of new functionality.
• Experience in defining, implementing, and executing IAM shared services across a health system.
• Expert knowledge of national regulatory compliances and frameworks such as HIPAA/HITECH, ISO, and NIST 800 Series.
• Strong preference will be given to candidates with experience in Healthcare IT.
• Ability to build and maintain collaborative working relationships with information technology and business personnel to design and execute appropriate controls.
• Excellent organizational, financial, communication, and analytical skills.

What you’ll gain as an Identity and Access Management Director:

• Opportunity to partner with the Deputy Chief Information Security Officer to build and implement a new vision for operational efficiency around identity and access management.
• Positioned at the center of a very complex and matrixed environment where you will optimize information security technology and automate IAM processes.
• Visibility across the UChicago Medicine system as a result of effective security presentations and response to best practice requests.

What you’ll do as an Identity and Access Management Director: 

• Lead a team of professionals to architect and implement the organization’s Identity and Access Management strategy, inclusive of staying current on the latest identity management trends, understanding business requirements and opportunities for automation and productivity gains, evaluating technologies to meet these strategies, and continuing to mature the IAM Program.
• Direct team to develop and implement self-service and automation capabilities as part of the IAM program and apply these same principles across the Health System as part of the larger Shared Service strategy.
• Manage and execute operational activities such as processing of System Access Request Forms, supporting new employee orientation, and processing all policy and regulatory required activities for a Health System, including developing and managing key metrics (KPIs), incorporating recommendations and executing on improvements, and liaising and managing key vendors to support the overall IAM program.
• Provide leadership to support other UChicago Medicine IT projects and operations that require IAM services.
• Assist with IAM related audits that involved processing and handling of internal and external audit requests.
• Lead and participate in UChicago Medicine Governance processes, such as the Infrastructure/Information Security portfolio, Privacy and Security Steering Committee, Hospital Operations, and other key committees.
• Provide IT thought leadership to the entire UChicago System relating to cloud migrations, IT business practice integrations, and building efficient organizational service layers.

Leadership at UChicago Medicine:

E4 Leadership (Equity, Engage, Evolve, Excel) is a patient centered management system that empowers teams to improve on a daily basis. This is done through daily readiness huddles, real time process monitoring, performance review huddles and structured problem solving.

E4L Leadership is an evolving system where leaders work together to cultivate a culture of equity and continuous improvement that enables

• Each person to realize their full potential for contribution
• The organization to achieve high performance outcomes
• System-wide integration, coordination and seamless execution
• Clear focus on exceptional, equitable patient care and experiences.

As part of the senior executive team, this position will be instrumental in reinforcing and sustaining UCM’s E4 Leadership Culture.

Must comply with UCMC’s COVID-19 Vaccination requirement as a condition of employment. If you have already received the vaccination, you must provide proof as part of the pre-employment process. This is in addition to your compliance with the Flu Vaccination requirement as well. Medical and religious exemptions will be considered consistent with applicable law. Lastly, a pre-employment physical, drug screening, and background check are also required for all employees prior to hire.

Why Join Us

We’ve been at the forefront of medicine since 1899. We provide superior healthcare with compassion, always mindful that each patient is a person, an individual. To accomplish this, we need employees with passion, talent and commitment… with patients and with each other. We’re in this together: working to advance medical innovation, serve the health needs of the community, and move our collective knowledge forward. If you’d like to add enriching human life to your profile, UChicago Medicine is for you. Here at the forefront, we’re doing work that really matters. Join us. Bring your passion.

UChicago Medicine is growing; discover how you can be a part of this pursuit of excellence at: UChicago Medicine Career Opportunities.

UChicago Medicine is an equal opportunity employer.  We evaluate qualified applicants without regard to race, color, ethnicity, ancestry, sex, sexual orientation, gender identity, marital status, civil union status, parental status, religion, national origin, age, disability, veteran status and other legally protected characteristics.

Must comply with UChicago Medicine’s COVID-19 Vaccination requirement as a condition of employment. If you have already received the vaccination, you must provide proof as part of the pre-employment process. This is in addition to your compliance with the Flu Vaccination requirement as well. Medical and religious exemptions will be considered consistent with applicable law. Lastly, a pre-employment physical, drug screening, and background check are also required for all employees prior to hire.