Senior Manager, Identity & Privileged Access Governance
Altria · United States · $132,500–$202,100 (stated in the posting)
Ready to turn identity risk into business confidence? As Senior Manager, Identity & Privileged Access Governance, you will develop how people, services, and automation systems gain and use access. This role protects critical assets and supports business priorities. You’ll influence executive decisions, build a high-performing governance team, and modernize how we lead identity risk by implementing automated processes, ongoing oversight, and clear accountability. This position is in Richmond, VA with a hybrid work schedule, but we will consider a remote working arrangement for the ideal applicant.
This is a governance leadership role, not hands-on platform administration. You’ll develop policies, standards, and control frameworks for identity and access management and privileged access management while collaborating with Identity Engineering, Infrastructure and Cloud Operations, Information Security, Human Resources, Technology Security and Compliance, Internal Audit, External Audit, and business teams to improve access governance and achieve measurable risk reduction.
What you will be doing:
- Setting the enterprise IAM/PAM governance strategy, policies, control framework, and multi-year roadmap while prioritizing investments and resources based on risk reduction, business value, and delivery capacity.
- Establishing clear control ownership, independent review, and decision rights across business and technology teams while advancing least privilege, segregation of duties, and appropriate administrative access controls.
- Leading governance for identity lifecycle, access certification, privileged access, and account ownership while holding control owners accountable for timely access changes, disablement, revocation, and remediation.
- Advising privileged-account governance across administrator, shared, emergency, default, and local accounts while setting expectations for credential protection, authentication controls, session monitoring, exception management, and coverage.
- Driving audit readiness, management control assurance, systemic root-cause remediation, and exception governance while providing executives with clear access to control efficiency, residual exposure, remediation progress, and risk-reduction outcomes.
- Modernizing identity controls through automation, continuous monitoring, lifecycle reconciliation, access-review workflows, evidence collection, and appropriately governed automated remediation.
- Expanding governance for non-human identities, including service accounts, workloads, applications, automation, bots, and AI agents, by establishing accountable ownership, lifecycle controls, credential safeguards, periodic certification, and least-privilege access.
- Developing governance talent and crafting the perspectives of senior leaders across business, engineering, operations, security, risk, compliance, audit, and Human Resources to resolve opposing priorities, strengthen accountability, and drive balanced enterprise-wide results.
We want you to have:
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent experience; Master’s degree preferred.
- 10+ years of dynamic experience in cybersecurity, identity and access management, or technology risk, including significant IAM/PAM governance experience within a large, complex enterprise.
- 5+ years of leadership experience managing teams, enterprise programs, or cross-functional identity or security initiatives, with demonstrated success developing talent and influencing senior leaders.
- Deep knowledge of IAM/PAM governance practices, including identity lifecycle management, access certification, least privilege, segregation of duties, role engineering, privileged-account coverage, just-in-time access, credential and secrets management, session oversight, and non-human identity risk.
- Working knowledge of identity technologies such as SailPoint, Saviynt, CyberArk, BeyondTrust, Delinea, Microsoft Entra ID, and Okta, with the technical judgment to challenge evidence and influence engineering teams without directly administering the platforms.
- Solid understanding of applicable frameworks and standards, including NIST CSF, NIST SP 800-53, NIST SP 800-63 Digital Identity Guidelines, NIST SP 800-207 Zero Trust Architecture, CIS Controls, ISO 27001, and SOX/ITGC access-control expectations.
- Demonstrated experience leading identity-governance transformation, automation, continuous monitoring, audit readiness, systemic remediation, exception governance, and risk-based investment planning; experience with non-human identity, secrets-management, or AI-agent access governance preferred.
- CISSP, CISM, CISA, or equivalent professional certification required; identity-focused credentials such as IDPro CIDPRO, CIAM, SailPoint, CyberArk, or Microsoft identity certifications preferred.
As a People Leader at Altria, you are accountable for both results and the experience of your team. You drive alignment by connecting strategy to daily work, and you model collaboration by embracing diverse perspectives. By creating trust, offering feedback, and leading with authenticity, you help strengthen Altria’s culture and deliver meaningful outcomes.
The starting salary is based on but not limited to experience, knowledge, and qualifications in determining compensation decisions. The Salary Range for this position is: $132,500.00 - $202,100.00.
Why You’ll Love Building Your Career at Altria
At Altria, we believe a great career starts with feeling supported — both at work and in life. Here’s what you’ll find here:
- Work where connection and flexibility meet — enjoy the benefits of in-person collaboration three days a week (Tuesday - Thursday), while maintaining the flexibility to work remotely on Mondays and Fridays. Our hybrid approach empowers you to stay connected, collaborate with colleagues, and manage your schedule in a way that works best for you.
- Own your time — start with 15 days of paid time off, 13 paid holidays, 2 floating holiday days, and a 37.5-hour workweek so you can recharge and live fully.
- A place where you belong — where your ideas are welcomed, your growth is encouraged, and your impact is real.
- Get recognized for your work — annual merit increases and performance bonus.
- A future you can count on — 401(k) matching from day one; plus Deferred Profit Sharing, an annual company contribution in an amount equal to 13%–17% of your base salary.
- Help with your goals — get help with student loan repayment assistance, attend a conference, or gain a new certification with professional development stipends.
- Support for what matters most — comprehensive medical, dental, and vision coverage for you and your family.
- Celebrating your milestones — paid parental and bonding leave for life’s biggest moments.
- Wellness that goes beyond work — programs that care for your whole well-being at whatever stage you are in your life.
- A culture that gives back — paid volunteer days and a shared commitment to making a difference.
At Altria, we offer more than benefits — we offer a career that fits your life, rewards your ambition, and celebrates your impact.
This position is not eligible for sponsorship.