Enterprise IAM Product Owner (Associate Director)

We are seeking a highly skilled and motivated Enterprise Identity & Access Management (IAM) Product Owner to lead the strategy, governance, and delivery of identity security capabilities across the enterprise.

As an IAM Product Owner within the Cybersecurity organization, you will play a pivotal role in defining and delivering secure, scalable, and modern identity services for workforce, privileged, machine, application, and AI agent identities. You will serve as the bridge between business stakeholders, cybersecurity, architecture, and engineering teams, ensuring IAM capabilities align with business objectives, regulatory requirements, and evolving security threats.

This role owns the enterprise IAM roadmap and product strategy, encompassing Identity Governance & Administration (IGA), Privileged Access Management (PAM), modern authentication, multi-factor authentication (MFA), passwordless authentication, Identity Threat Detection & Response (ITDR), and governance of machine and AI agent identities. The role is responsible for driving the organization's transition toward phishing-resistant, passwordless authentication while enabling secure access across workforce, privileged, application, machine, and AI-powered environments.

Own the enterprise identity strategy for workforce, privileged, machine, application, and AI agent identities. Establish and enforce IAM standards, governance processes, and policies while maintaining supporting documentation and operating procedures. Ensure IAM platforms and services adhere to internal standards, industry best practices, and regulatory requirements. Monitor emerging technologies, threat trends, identity security risks, and regulatory developments, incorporating them into the IAM strategy and roadmap. Drive adoption of Zero Trust principles throughout identity and access management capabilities.

Lead the strategy and evolution of Identity Governance & Administration (IGA) capabilities, including identity lifecycle management, joiner-mover-leaver processes, access requests, role management, birthright access, and access certifications. Ensure effective governance of workforce, contractor, partner, privileged, and non-human identities. Define and implement governance, lifecycle management, authentication, authorization, and monitoring controls for AI agents, machine identities, service accounts, APIs, service principals, and application identities. Establish standards and guardrails for AI agent identities, ensuring appropriate identity proofing, credential management, least-privilege access, segregation of duties, and continuous oversight. Collaborate with AI, data, and application teams to integrate identity security controls into AI platforms, autonomous systems, AI agents, and agentic workflows. Develop strategies to manage and secure the growing population of non-human identities, including secrets, certificates, tokens, API credentials, service accounts, and cryptographic keys. Define governance and risk management controls for AI-enabled applications and autonomous systems to ensure secure, auditable, and compliant identity operations.

Define and lead the enterprise strategy for modern authentication, MFA, passwordless authentication, and adaptive access controls. Establish governance and standards for authentication technologies including FIDO2 security keys, passkeys, Microsoft Authenticator, Windows Hello for Business, certificate-based authentication, and biometric authentication methods. Partner with Security Operations, Identity Engineering, and End User Experience teams to improve authentication security while reducing end-user friction. Leverage Conditional Access, risk-based authentication, device trust, and contextual access controls to strengthen identity protection. Measure and drive adoption of MFA and passwordless authentication capabilities through defined security and user experience metrics. Ensure authentication and authorization controls are consistently applied across hybrid, cloud, SaaS, machine-to-machine, and AI-enabled environments.

Partner with Cyber Defense and Security Operations teams to improve monitoring, detection, and response to identity-based attacks. Drive improvements in identity visibility, risk monitoring, and identity resilience across enterprise environments.

Product Management & Delivery Prioritize product backlogs and manage resource allocation to ensure timely delivery of high-quality IAM capabilities using Agile methodologies. Define key performance indicators (KPIs) and metrics that measure adoption, effectiveness, and risk reduction.

Develop high-level architecture and integration strategies across IAM platforms and supporting technologies. Ensure IAM solutions, including SailPoint, Microsoft Entra ID (Azure AD), Active Directory, BeyondTrust, Delinea, and align with enterprise architecture standards. Collaborate with Security Architects, Enterprise Architects, Infrastructure teams, HR, AI teams, Application Development, and Digital organizations to translate business requirements into actionable features and user stories. Partner with Security and Architecture teams to align identity capabilities with corporate policies, Zero Trust principles, and industry best practices.

10+ years of experience in Identity & Access Management (IAM), Cybersecurity and Product Management including leadership experience as a Product Owner. (Must have direct management experience)

Deep expertise in IAM domains including Identity Governance & Administration (IGA), Privileged Access Management (PAM), Identity Lifecycle Management, Role-Based Access Control (RBAC), and Zero Trust security principles.

Hands-on experience with enterprise IAM platforms such as Microsoft Entra ID, SailPoint, Delinea, and SAP Identity Authentication Service (IAS), supporting SSO, federation, authentication, provisioning, and identity lifecycle management.

Proven ability to develop IAM strategies, governance frameworks, operating models, and multi-year transformation roadmaps aligned with business and security objectives.

Experience securing workforce, privileged, machine, application, service, and other non-human identities across complex enterprise environments.

Knowledge of governance and security controls for AI agents, service accounts, APIs, service principals, machine identities, and emerging non-human identity use cases.

Expertise with modern authentication technologies such as FIDO2, passkeys, Windows Hello for Business, Microsoft Authenticator, and certificate-based authentication, including adoption and governance of password less programs.

Strong cross-functional leadership skills with experience partnering across cybersecurity, infrastructure, cloud, HR, digital, and business teams to deliver enterprise technology solutions.

Understanding of Identity Threat Detection & Response (ITDR), identity security monitoring, risk management, regulatory compliance, data privacy requirements, and industry security certifications such as CISSP, CISM, CISA, CCSP, SC-100, or SC-300.

Hybrid- 3 days in office, 2 days remote

We serve a diverse consumer base which is why we believe teams that reflect our consumers bring fresh perspectives, drive innovation, and help us stay attuned to the world around us. To help make this possible, we offer comprehensive, competitive benefits that prioritize all aspects of wellbeing and provide flexibility for our teammates' unique needs. This includes robust health plans, a market-leading 401(k) program with a company match, flexible time off benefits (including half-day summer Fridays depending on location), inclusive fertility/adoption benefits, and more.

We use broad salary ranges that reflect the competitive market for similar jobs, provide sufficient opportunity for growth as you gain experience and expand responsibilities, while also allowing for differentiation based on performance. This job is also eligible for participation in Clorox's incentive plans, subject to the terms of the applicable plan documents and policies.

Clorox (and its brand families) does not accept agency resumes.