MANAGER OF ACCESS MANAGEMENT AND INFORMATION SECURITY

For UCOP internal applicants, please login to the internal candidate gateway at:

Position Base
Riverside

Location
UCPath Center

UCPATH CENTER

At the University of California (UC), your contributions make a difference. A world leader producing Nobel and Pulitzer Prize recipients with over 150 years of groundbreaking research transforming the world. Choose a career where you can leverage your knowledge, skills and aspirations to inspire and support some of the greatest minds in the world, and those who will follow in their footsteps. Working at the University of California is being part of a unique institution, and a vibrant and diverse community. At the University of California, Office of the President, we propel our mission through impactful work locally, in government centers and systemwide. We are passionate people, serving the greater good.

The University of California, one of the largest and most acclaimed institutions of higher learning in the world, is dedicated to excellence in teaching, research and public service. The University of California Office of the President is the headquarters to the 10 campuses, six academic medical centers and three national laboratories and enrolls premier students from California, the nation and the world.

UCPath is the University of California's shared services center in Riverside, CA. UCPath manages the payroll, benefits, and other human resources transactions for more than 265,000 UC employees working across ten UC campuses, six medical centers, three national labs and more. The staff at the UCPath Center work in a variety of areas including business operations, customer service, quality management, technology, training, human resources and communications.

POSITION SUMMARY

The Manager of Information Security and Access Management is responsible for managing cross-functional enterprise access governance and information security activities. This role oversees the implementation, administration, and continuous improvement of enterprise access governance frameworks, identity and access management (IAM) controls, privileged access oversight, and institutional security compliance practices designed to safeguard organizational systems, applications, and sensitive institutional data. Reporting directly to the UCPath Executive Director, this position partners closely with UCPath and UCOP Information Technology, cybersecurity leadership, compliance stakeholders, and shared services operational teams to support alignment between enterprise access governance practices, institutional security policies, audit requirements, and cybersecurity standards. The Manager leads cross-functional enterprise initiatives related to access governance, segregation of duties, privileged access management, security compliance monitoring, and cybersecurity risk mitigation. This role also serves as a key operational liaison supporting enterprise cybersecurity coordination efforts, including governance assessments, incident response coordination, security awareness, cyber preparedness, business continuity planning, disaster recovery coordination, and continuous improvement of enterprise security practices.

Key Responsibilities

• 30% Access Management Oversight

  Create an Access Management Structure: Review and analyze current organizational structure and functions for managing access and recommend an appropriate functional structure for enterprise access management operations. Develop a cross-functional enterprise Access Management Plan: Review and update the existing Access Management Plan to ensure it conforms to industry standards and best practices in the area of access management and cyber security. Make revisions to the current plan as necessary to align with industry best practices. Ensure the plan aligns with Zero Trust principles, least privilege methodologies, cybersecurity risk management practices, and UC Information Security standards. Establish Compliance Framework: Create and enforce a framework, processes and procedures to ensure organization-wide adherence to the cross-functional enterprise Access Management Plan, including monitoring and auditing for non-compliance. Develop and maintain executive reporting metrics to monitor access governance maturity, segregation of duties violations, privileged access reviews, audit findings, and remediation activities. Manage Logical Access: Oversee logical access to UCPath data and systems, establish protocols for ensuring account holders receive only the least privileged access necessary for their roles. Document Critical Functions: Record critical functions or privileged actions that require two or more individuals, and separate duties to minimize the risk of individuals abusing privileges by limiting their unilateral access to privileged actions, in accordance with UC policies. Ensure Audit Integrity: Ensure privileged users managing access control cannot alter audit functions or records.

• 30% Conduct Annual Reviews

  Conduct annual segregation of duties, privileged access, and enterprise access certification reviews. Identity and Access Management (IAM) systems. Oversee Access to Systems: Manage access to enterprise systems, applications, and institutional data by employees, contractors, and vendors, ensuring alignment with the University of California Information Security Policy. Implement Security Controls: Ensure all locations, business units, and affiliated entities receiving institutional information fully understand that they are responsible for implementing appropriate security controls. Partner with business owners to validate implementation of compensating controls where technical controls are not feasible. Review Inventory: Maintain an inventory of enterprise applications and conduct periodic reviews to ensure up-to-date access documentation and compliance with least privilege access standards. Ensure all access management processes align to the UC Electronic Information Security Policy IS-3.

• 30% Cyber Security

  In coordination with the UCOP Chief Information Security Officer, serve as operational cybersecurity leader and trusted advisor for identity security, access governance, cyber risk management, and enterprise information protection. In coordination with the UCOP Chief Information Security Officer, coordinate cyber security activities, reviews, and assessments of enterprise systems, assets, and institutional data. In coordination with the UCOP Chief Information Security Officer, make recommendations to UCOP cyber security processes as needed to protect UCPath's system assets and data. Foster a culture of cybersecurity awareness, accountability, and continuous improvement while translating cybersecurity risks into business impacts and executive recommendations. Maintain knowledge of emerging cybersecurity trends related to Internet of Things (IoT), cloud computing security issues, and system hardening techniques. In coordination with the UCOP Chief Information Security Officer, lead the coordination of UCPath incident response efforts including threat detection & response, incident management, disaster recovery planning, and incident recovery procedures.

• 10% Leadership and Strategic Impact

  Lead Large Multi-faceted Projects: Act as Senior Project Manager to implement enterprise access management and cybersecurity initiatives across diverse operational and IT environments. In coordination with the UCOP Chief Information Security Officer, develop and execute a multi-year Information Security and Identity Governance strategic roadmap. Use Strategic Mindset: Use a strong analytical and strategic mindset to identify areas needing innovative solutions to solve problems. Provides direction and guidance to staff members.

Experience
Required Qualifications

• Min 10 years management and/or leadership experience in Identity and Access Management and Cyber Security and/or equivalent experience and/or equivalent education/training

Skills and Abilities
Required Qualifications

• Subject Matter Expert in Identity and Access Management (IAM)
• Expert Knowledge of IAM concepts (Least Privilege, Privileged Access, Roles, Data Mining, Segregation of Duty, Role-Based Access Control)
• In-depth experience in developing IAM governance documentation (policies, procedures, standards, guidelines, role creation/management, Separation of Duties, Access Reviews)
• Experience in budget management for IAM projects/initiatives
• Project Leadership
• Experience leading multi-faceted projects across multi-location operational and IT divisions
• Success in leading and mentoring high-performing team of Access Management professionals
• Success with implementation of Access Management Plans across multiple locations, operational, and IT divisions
• Strong analytical, problem-solving abilities, strategic mindset
• Enjoys working independently and leading cross-functional teams

Education
Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field and/or equivalent experience/training.

Preferred Qualifications

• Advanced degree or relevant certifications are highly preferred (e.g., CISSP, CISM, CISA, IAM certifications such as Certified Identity and Access Manager (CIAM, CAMS, etc.)

The University of California, Office of the President, is required to provide a reasonable estimate of the compensation range for this role. This range takes into account the wide range of factors that are considered in making compensation decisions including but not limited to experience, skills, knowledge, abilities, education, licensure and certifications, and other business and organizational needs. It is not typical for an individual to be offered a salary at or near the top of the range for a position. Salary offers are determined based on final candidate qualifications and experience. The full salary range shows the growth potential for this position and the pay scale is the budgeted salary or hourly range that the University reasonably expects to pay for this position.

Travel Requirements
10% May require occasional travel to UC locations

Job Title
Information Systems Manager 2

Job Code
000668

Salary Grade
Grade 27

Payscale:
$175,000 - $215,000 - Salary offers are determined based on final candidate qualifications and experience

Benefits: For information on the comprehensive benefits package offered by UCPath Center visit:

ADDITIONAL INFORMATION

This position will work a hybrid schedule which includes a combination of working both onsite at UCPath in Riverside and remote in California.

HOW TO APPLY

Please be prepared to attach a cover letter and resume with your application.

JOB CLOSE DATE

For first consideration, please apply by: November 13, 2026. The position will be open until filled.

CONDITIONS OF EMPLOYMENT

Background Check Process: Successful completion of a background check is required for this critical position.

Smoke Free Work Environment: The University of California, Office of the President, is smoke & tobacco-free as of January 1, 2014.

As a condition of employment, you will be required to comply with the University of California , as may be amended or revised from time to time. Federal, state, or local public health directives may impose additional requirements.

As a condition of employment, the finalist will be required to disclose if they are subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct, are currently being investigated for misconduct, left a position during an investigation for alleged misconduct, or have filed an appeal with a previous employer.

• "Misconduct" means any violation of the policies or laws governing conduct at the applicant's previous place of employment, including, but