AI Identity and Access Management Consulting Director

About this role

You have a clear vision of where your career can go. And we have the leadership to help you get there.  At CNA, we strive to create a culture in which people know they matter and are part of something important, ensuring the abilities of all employees are used to their fullest potential. 

The Consulting Director, AI Identity & Access Management (IAM) is a strategic and hands-on leader responsible for advancing CNA’s modern IAM capabilities through the application of artificial intelligence, automation, and next-generation identity governance. This role focuses on governing AI agents as non-human identities, driving intelligent automation, and improving end-user experience across IAM services. The position partners across Security, AI Governance, Engineering, and Business teams to ensure AI-enabled identity solutions are secure, scalable, and aligned with enterprise governance standards. JOB DESCRIPTION:

Key Responsibilities AI Identity Governance (Core Pillar) • Lead the design and implementation of AI Agent Identity Governance, ensuring all agents are treated as first-class non-human identities with defined ownership, lifecycle, and access controls. • Establish and operationalize controls for: • Identity registration, ownership, and accountability • Secure authentication and credential management • Fine-grained authorization and least privilege enforcement • Auditability and traceability of all agent actions

• Define and enforce separation of user vs. agent identity context to reduce risk and blast radius. • Accelerate the adoption of AI usage in the IAM space • Partner with AI Governance, Security, Legal, and Compliance teams to align with enterprise AI policy and approval processes.

AI-Driven IAM Transformation & Automation • Drive adoption of AI-powered IAM capabilities, including: • Intelligent role mining and access optimization • Unified identity risk scoring • Automated access decisioning and lifecycle workflows • AI-enabled identity analytics and anomaly detection

• Identify and implement opportunities to eliminate manual processes across provisioning, certification, and access reviews. • Leverage AI and orchestration tools to deliver scale, consistency, and auditability in IAM operations.

End User Experience & Self-Service Innovation • Improve IAM user experience through AI-driven solutions such as: • Identity chatbots and virtual assistants • Simplified access request workflows • Proactive identity insights and guidance for users

• Reduce friction while maintaining strong security controls and compliance posture.

Strategy, Architecture & Innovation • Define the enterprise roadmap for AI in IAM, aligned to broader IAM strategy and security priorities. • Evaluate and integrate emerging capabilities across Okta, SailPoint, CyberArk, cloud platforms, and AI ecosystems. • Create reference architectures and standards for: • AI agent identity lifecycle management • Secure AI integrations with IAM platforms • Scalable identity models for human and non-human identities

• Act as a thought leader and advisor to senior leadership on AI + IAM strategy.

Required Qualifications • 10+ years in Identity & Access Management, Security Architecture, or related domain • Demonstrated experience with IAM platforms such as (Okta, SailPoint, CyberArk, cloud IAM) • Experience with automation, orchestration, or AI-enabled solutions within security or IT operations • Strong understanding of: • Identity lifecycle management • RBAC/ABAC and least privilege models • Authentication and authorization frameworks • Audit and regulatory requirements

• Ability to operate both strategically and hands-on across architecture and execution

Preferred Qualifications • Experience with AI/ML, GenAI, or agentic systems in enterprise environments • Familiarity with AI governance frameworks and model risk considerations • Experience integrating IAM with cloud, APIs, and developer ecosystems • Background in building automation or AI-driven operational solutions

#LI-Hybrid #LI-DM1

I n certain jurisdictions, CNA is legally required to include a reasonable estimate of the compensation for this role. In District of Columbia , California, Colorado, Connecticut, Illinois , Maryland , Massachusetts , New York and Washington, the national base pay range for this job level is $97,000 to $189,000 annually. Salary determinations are based on various factors, including but not limited to, relevant work experience, skills, certifications and location. CNA offers a comprehensive and competitive benefits package to help our employees – and their family members – achieve their physical, financial, emotional and social wellbeing goals.  For a detailed look at CNA’s benefits, please visit  cnabenefits.com .

CNA utilizes AI-enabled technology during the recruiting process. For more information, please visit our  careers page .

CNA is committed to providing reasonable accommodations to qualified individuals with disabilities in the recruitment process. To request an accommodation, please contact  leaveadministration@cna.com

Similar jobs

• Identity and Access Management Architect- Manager — Crowe · Chicago IL USA | San Francisco CA USA | Indianapolis IN USA
• AI Security Consulting Director — CNA · Chicago, IL
• Identity and Access Management Analyst — Jupitermed · Jupiter Innovation Center
• Identity and Access Management Engineer- Senior Consultant — Crowe · Chicago IL USA | San Francisco CA USA | Indianapolis IN USA
• Senior Manager, Identity & Access Management — Xcelenergy · Minneapolis, MN, 55401 | Denver, CO, 80205 | Amarillo, TX, 79101
• Senior Identity and Access Management Engineer — Intersystems · Boston, MA
• Director, Engineering - Identity & Access Management Solutions (IAM) — Vizient · Irving, TX 75062 Vizient Corporate HQ | Chicago, IL | Edina, MN
• Identity & Access Management (IAM) Technology Lead — Brown Brothers Harriman (BBH) · Boston | Jersey City