Sr CIAM Security Manager

Senior CIAM Security Manager

Location and Work Model

Hybrid work arrangement with a four day onsite schedule in one of the following Citizens hub locations:

• Johnston, RI
• Phoenix, AZ
• Westwood, MA
• Medford, MA
• Iselin, NJ
• Pittsburgh, PA
• Plano, TX
• Franklin, TN
• Cleveland, OH
• Chicago, IL

About the Role

Citizens is investing in the future of Customer Identity and Access Management (CIAM) to deliver secure, frictionless, and trusted digital experiences for millions of customers. As the Senior CIAM Security Manager, you will serve as the technology execution leader responsible for building and advancing the technology strategy, engineering capabilities, and operational excellence of Citizens' Customer Identity and Access Management platform.

This role is responsible for translating CIAM strategy into scalable, resilient, and secure technology solutions that strengthen customer trust, reduce fraud risk, improve authentication experiences, and support enterprise growth. You will partner closely with Product Management, Architecture, Cybersecurity, Fraud, Risk, Infrastructure, Digital, and Engineering teams to modernize Citizens' customer identity ecosystem.

Reporting to the IT Security Director, you will lead teams responsible for customer authentication, identity lifecycle management, authorization, access governance, identity proofing, privileged access controls, and related identity security capabilities. This position combines technical leadership, people leadership, and strategic execution to help drive Citizens' next generation digital identity platform.

Primary Responsibilities

• Define and execute the technology strategy and multi year roadmap for Customer Identity and Access Management (CIAM) capabilities.
• Lead the design, implementation, and evolution of customer identity, authentication, authorization, registration, account recovery, identity proofing, and identity lifecycle management solutions.
• Drive engineering standards, governance models, integration patterns, and technology best practices across identity platforms and services.
• Build secure, scalable, highly available identity platforms that support customer growth, digital transformation initiatives, and evolving business needs.
• Lead delivery of authentication modernization initiatives including passwordless authentication, adaptive authentication, risk based authentication, multifactor authentication (MFA), identity federation, and customer identity orchestration.
• Partner with Product Management to translate business priorities into technology solutions and measurable outcomes.
• Collaborate with Security, Fraud, Digital, Architecture, Infrastructure, Risk, and Engineering teams to ensure alignment across identity strategy and execution.
• Establish and maintain technology roadmaps, investment plans, and capability strategies aligned with enterprise objectives.
• Evaluate emerging technologies, industry trends, and best practices to improve customer experience, fraud prevention, platform resilience, and operational efficiency.
• Drive implementation of authentication, authorization, access governance, privileged access management, encryption, and identity security controls.
• Ensure technology solutions align with regulatory requirements, cybersecurity standards, risk management frameworks, and audit expectations.
• Oversee platform health, availability, performance, operational metrics, and continuous improvement initiatives.
• Assess technology risks and provide strategic guidance regarding security posture, technology investments, and identity related business risks.
• Foster a culture of innovation, accountability, collaboration, and engineering excellence.
• Build, mentor, and develop high performing teams including engineers, architects, security professionals, and technology leaders.
• Select, develop, and evaluate talent to ensure the continued growth and scalability of the organization.
• Communicate roadmap progress, technology strategy, operational performance, risks, and key initiatives to senior leadership and stakeholders.

Required Qualifications

• Bachelor's Degree in Computer Science, Information Security, Information Systems, Engineering, or related field, or equivalent work experience.
• 10+ years of experience in Information Security, Cybersecurity, Identity and Access Management (IAM), Customer Identity and Access Management (CIAM), or related disciplines.
• 5+ years of leadership experience managing technology teams, engineering functions, or enterprise security programs.
• Deep expertise in:
  • Customer Identity and Access Management (CIAM)
  • Identity and Access Management (IAM)
  • Authentication
  • Authorization
  • Identity Federation
  • Identity Lifecycle Management
  • Access Governance
  • Privileged Access Management (PAM)
  • Role Based Access Control (RBAC)
• Experience designing, implementing, and operating enterprise scale CIAM and IAM platforms.
• Strong understanding of modern authentication and identity standards including:
  • SAML
  • OAuth 2.0
  • OpenID Connect (OIDC)
  • FIDO2
  • Passkeys
  • Multifactor Authentication (MFA)
• Experience supporting customer facing digital identity platforms and authentication ecosystems.
• Experience developing technology strategies, roadmaps, and long term investment plans.
• Experience leading large scale technology transformation programs and identity modernization initiatives.
• Strong understanding of cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform.
• Experience collaborating across Product, Architecture, Engineering, Security, Fraud, Risk, Compliance, and Business teams.
• Strong analytical, organizational, problem solving, decision making, and leadership capabilities.
• Exceptional written, verbal, and executive communication skills.

Preferred Qualifications

• Master's Degree in Cybersecurity, Computer Science, Engineering, Information Systems, Business Administration, or related discipline.
• Experience leading Customer Identity and Access Management programs within banking, financial services, fintech, or other highly regulated industries.
• Hands on experience with one or more identity platforms including:
  • Ping Identity
  • ForgeRock
  • Okta
  • Auth0
  • Microsoft Entra ID
  • SailPoint
  • CyberArk
• Experience delivering passwordless authentication, adaptive authentication, and identity orchestration solutions.
• Strong understanding of Zero Trust Architecture and modern identity security practices.
• Experience supporting digital transformation, fraud prevention, customer experience modernization, and identity security initiatives.

Professional Certifications Preferred

• CISSP
• CISM
• CCSP
• Certified Identity and Access Manager (CIAM)
• TOGAF
• AWS Security Certification
• Microsoft Security Certification

Hours & Work Schedule

Hours per Week: 40

Work Schedule: Monday through Friday

Work Arrangement: Hybrid. Candidates should reside within reasonable commuting distance of a Citizens hub location. Remote consideration may be available for exceptionally qualified candidates based on business needs.

Pay Transparency

The salary range for this position is $170,000 to $230,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual compensation is based on factors including work location, skills, experience, and qualifications.

We offer competitive pay and a comprehensive benefits package including medical, dental and vision coverage, retirement benefits, parental leave, flexible work arrangements, education assistance, wellness programs, and more. For additional information, visit Citizens Benefits.