The posting
Job Description
JOB SUMMARY
The Senior Director, Identity Governance & Administration (IGA) is a key leader within Global Information Security (GIS) responsible for the strategy, governance, operations, and modernization of Marriott's enterprise IGA ecosystem. The Senior Director serves as the Service owner for Marriott's IGA portfolio and the primary representative for workforce identity governance. This role leads the team transforming identity governance from a control-focused function into an automated, intelligence-driven enterprise capability that delivers security, compliance, operational efficiency, and business value at scale. The Senior Director oversees delivery, operational performance and continuous improvement across workforce identity, access lifecycle management, access requests, provisioning, role-based access control, access certifications, entitlement governance, application onboarding, audit readiness, and emerging identity types including AI, machine, and non-human identities. This leadership position directs distributed internal teams, offshore resources, managed service providers, contractors, and implementation partners while aligning product strategy, delivery, production operations, business priorities, security requirements, compliance obligations, funding, and enterprise transformation dependencies across enterprise IGA platforms, directory integrations, and related identity services
CANDIDATE PROFILE
Education and Experience
Required
- 10+ years of progressive experience in Information Technology, Information Security, Identity and Access Management (IAM), Identity Governance and Administration (IGA), or related enterprise technology disciplines including: 5+ years’ experience managing teams, cross-functional initiatives and complex technology delivery. 5+ years’ experience with enterprise IGA platforms (e.g. SailPoint IdentityIQ and Saviynt) including identity lifecycle management, access requests, provisioning, certifications, RBAC, entitlement governance, and application onboarding. 5+ years’ experience in leading delivery and production operations for business-critical enterprise technology services. Experience supporting audit, compliance, risk management, control validation, evidence collection, and remediation activities. Experience leading global delivery teams, including offshore resources, internal teams, managed service providers, contractors, and multiple technology vendors. Experience working in a highly matrixed environment with business stakeholders, application owners, infrastructure teams, security teams, vendors, and service providers.
Preferred
- Experience with directory services, identity infrastructure, enterprise integrations, APIs, middleware, cloud services, and authentication or access management technologies.
- Experience with ITIL, service management, Agile delivery, JIRA, operational metrics, financial planning, resource forecasting, and vendor governance.
- Relevant credentials such as CISSP, CISM, ITIL, PMP, or equivalent industry certifications.
CORE WORK ACTIVITIES
- Own the enterprise vision, strategy, roadmap, operating model, and investment priorities for Marriott's IGA services, positioning identity as a foundational enterprise capability that enables business growth, workforce productivity, digital transformation, and risk reduction.
- Serve as the accountable Service Owner for the IGA portfolio, ensuring business value is balanced with security, compliance, user experience, operational excellence, scalability, and long-term sustainability.
- Own the enterprise service strategy and governance for workforce identity services, including identity platforms, authoritative identity sources, directory integrations, and related access governance capabilities.
- Establish the strategic direction, service objectives, and governance framework for enterprise IGA capabilities, including identity lifecycle management, access governance, role management, entitlement governance, certifications, policy enforcement, segregation of duties, analytics, and audit support.
- Partner with IGA engineering, operations, and service delivery leaders to ensure service health, stakeholder communications, escalation management, change governance, operational readiness, knowledge transfer, and continual service improvement objectives are achieved.
- Lead product portfolio management for IGA services, including demand management, roadmap development, prioritization, release governance, stakeholder engagement, service transitions, and continuous service improvement.
- Direct the modernization strategy for identity governance services, establishing migration priorities, target-state capabilities, adoption plans, operational readiness expectations, and value realization objectives across the enterprise.
- Establish enterprise onboarding standards, integration patterns, service requirements, design principles, operational expectations, and governance controls that enable scalable adoption of identity services.
- Own the evolution of Marriott's authorization strategy through a mature role-based access control (RBAC) program, including business role models, persona frameworks, ownership structures, certification alignment, and governance processes that improve consistency, efficiency, and compliance outcomes.
- Lead the enterprise strategy and governance model for workforce, machine, AI, and other non-human identities, ensuring lifecycle management, ownership, accountability, risk controls, and compliance requirements are consistently applied across all identity types.
- Champion a zero-touch identity lifecycle vision by driving adoption of automation, orchestration, and policy-based provisioning capabilities that improve user experience, operational efficiency, and governance effectiveness.
- Own certification and review services, ensuring alignment with regulatory requirements, audit expectations, risk management objectives, and control effectiveness standards.
- Represent IGA services within major enterprise transformation programs, ensuring identity requirements, dependencies, priorities, resource needs, risks, and service outcomes are aligned with program objectives and business value.
- Build and maintain strategic partnerships across Human Resources, application teams, infrastructure, authentication, privileged access, service management, audit, compliance, risk, procurement, finance, and business stakeholders to ensure identity services meet enterprise needs.
- Translate business objectives, regulatory requirements, and security priorities into actionable service strategies, product roadmaps, investment plans, governance decisions, and measurable outcomes.
- Provide enterprise leadership through effective prioritization, tradeoff decisions, and risk-based governance, balancing stakeholder expectations, organizational capacity, operational considerations, and strategic objectives.
- Govern relationships with internal teams, managed service providers, implementation partners, contractors, and offshore resources through defined accountability models, performance metrics, service reviews, financial stewardship, and delivery oversight.
- Sponsor and oversee compliance, audit, and regulatory initiatives, including SOX, PCI, SCOUT, and related governance requirements, ensuring sustainable controls, effective remediation, transparent risk management, and ongoing audit readiness.
- Define, monitor, and communicate service delivery, portfolio health, roadmap progress, funding requirements, capacity trends, strategic risks, operational metrics, and key decisions to executive leadership and stakeholders.
TECHNICAL SKILLS
- Apply expertise in enterprise IGA architecture, platforms, operating models, and control frameworks across identity lifecycle management, access requests, provisioning, certifications, RBAC, entitlement governance, policy enforcement, and access reviews.
- Provide leadership across enterprise IGA platforms, internal identity capabilities, directory services, authentication and access management technologies, APIs, middleware, cloud services, ITSM platforms, and enterprise integrations.
- Understand application onboarding and connector patterns, identity and account correlation, aggregation and reconciliation, automated and manual fulfillment, lifecycle events, approval workflows, role models, certification configurations, and production support requirements.
- Apply knowledge of software delivery and service management practices across requirements, architecture, design, development, testing, implementation, release, maintenance, incident, problem, change, operational readiness, and service transition activities.
- Use business, operational, security, audit, financial, and delivery data to establish priorities, evaluate options, manage risk, communicate decisions, and guide investment across a complex identity portfolio.
- Communicate complex identity, security, risk, and technology topics clearly to technical teams, business stakeholders, control owners, auditors, vendors, and senior leadership.
At Marriott International, we are dedicated to being an equal opportunity employer, welcoming all and providing access to opportunity. We actively foster an environment where the unique backgrounds of our associates are valued and celebrated. Our greatest strength lies in the rich blend of culture, talent, and experiences of our associates. We are committed to non-discrimination on any protected basis, including disability, veteran status, or other basis protected by applicable law.
About Us
All positions offer a 401(k) plan, stock purchase plan, discounts at Marriott properties, commuter benefits, employee assistance plan, and childcare discounts. Benefits are subject to terms and conditions, which may include rules regarding eligibility, enrollment, waiting period, contribution, benefit limits, election changes, benefit exclusions, and others. Click here to learn more.
Full-time positions also offer coverage for medical, dental, vision, health care flexible spending account, dependent care flexible spending account, life insurance, disability insurance, accident insurance, adoption expense reimbursements, paid parental leave and educational assistance.
Washington Applicants Only: Employees will accrue paid sick leave, 0.077 PTO balance for every hour worked and be eligible to receive a minimum of 9 holidays annually.
Marriott Headquarters (HQ) supports a hybrid work environment that helps associates Be Connected. HQ based roles are generally hybrid and require regular in-office presence at the assigned location, including for candidates who live within commuting distance of HQ for a role listed as remote. Remote roles will be clearly identified in the job posting.
Marriott International is the world’s largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work, begin your purpose, belong to an amazing global team, and become the best version of you.
