Enterprise IAM Product Owner (Associate Director)
- Location
- Durham, NC
- Employment
- Full Time
- Work model
- On-Site
- Level
- Senior
- H-1B history
- 4 approvals (FY2023)
- Posted
Skills
About this role
Clorox is the place that’s committed to growth – for our people and our brands. Guided by our purpose and values, and with people at the center of everything we do, we believe every one of us can make a positive impact on consumers, communities, and teammates. Join our team. #CloroxIsThePlace Your role at Clorox: We are seeking a highly skilled and motivated Enterprise Identity & Access Management (IAM) Product Owner to lead the strategy, governance, and delivery of identity security capabilities across the enterprise. As an IAM Product Owner within the Cybersecurity organization, you will play a pivotal role in defining and delivering secure, scalable, and modern identity services for workforce, privileged, machine, application, and AI agent identities. You will serve as the bridge between business stakeholders, cybersecurity, architecture, and engineering teams, ensuring IAM capabilities align with business objectives, regulatory requirements, and evolving security threats. This role owns the enterprise IAM roadmap and product strategy, encompassing Identity Governance & Administration (IGA), Privileged Access Management (PAM), modern authentication, multi-factor authentication (MFA), passwordless authentication, Identity Threat Detection & Response (ITDR), and governance of machine and AI agent identities. The role is responsible for driving the organization's transition toward phishing-resistant, passwordless authentication while enabling secure access across workforce, privileged, application, machine, and AI-powered environments. In this role, you will: Strategy & Governance Define and communicate a compelling IAM vision, strategy, and roadmap that aligns with organizational security and business objectives. Own the enterprise identity strategy for workforce, privileged, machine, application, and AI agent identities. Align IAM capabilities with organizational goals, ensuring scalability, flexibility, resilience, and operational effectiveness. Establish and enforce IAM standards, governance processes, and policies while maintaining supporting documentation and operating procedures. Ensure IAM platforms and services adhere to internal standards, industry best practices, and regulatory requirements. Monitor emerging technologies, threat trends, identity security risks, and regulatory developments, incorporating them into the IAM strategy and roadmap. Drive adoption of Zero Trust principles throughout identity and access management capabilities. Identity Governance & Administration Lead the strategy and evolution of Identity Governance & Administration (IGA) capabilities, including identity lifecycle management, joiner-mover-leaver processes, access requests, role management, birthright access, and access certifications. Ensure effective governance of workforce, contractor, partner, privileged, and non-human identities. Drive least-privilege access models, segregation of duties, and continuous access review processes. Non-Human & AI Agent Identity Security Define and implement governance, lifecycle management, authentication, authorization, and monitoring controls for AI agents, machine identities, service accounts, APIs, service principals, and application identities. Establish standards and guardrails for AI agent identities, ensuring appropriate identity proofing, credential management, least-privilege access, segregation of duties, and continuous oversight. Collaborate with AI, data, and application teams to integrate identity security controls into AI platforms, autonomous systems, AI agents, and agentic workflows. Develop strategies to manage and secure the growing population of non-human identities, including secrets, certificates, tokens, API credentials, service accounts, and cryptographic keys. Define governance and risk management controls for AI-enabled applications and autonomous systems to ensure secure, auditable, and compliant identity operations. Authentication, MFA & Passwordless Security Define and