Senior Manager, Identity Governance

Location: Nashville, Tennessee

We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.

Job Summary

As a key member of UMG Global Tech’s Security & Identity organization, the Senior Manager, Identity Governance & Administration leads UMG’s Identity Governance and Administration capability and serves as the enterprise IAM deputy for governance, operating model, roadmap, and execution. This role is accountable for the security, effectiveness, scalability, and continuous improvement of UMG’s IGA processes and platforms, with primary responsibility for Saviynt and related identity-governance capabilities.

This is an identity-security leadership role, not simply an IT operations or account-administration role. The Senior Manager treats identity as a foundational security control and enterprise risk domain. They ensure that identity data, access decisions, entitlements, workflows, lifecycle events, and governance evidence are designed and operated in a way that reduces cyber risk, supports business outcomes, and enables sustainable global operations.

The Senior Manager directly leads the IGA/Saviynt team and mentors leaders and practitioners across UMG’s other identity product functions. The role reports directly to the VP, Security & Identity and works as a peer leader with the Sr. Security & Identity Architect. The Senior Manager owns IGA strategy, operating model, platform outcomes, and control execution, while partnering with the Architect to align IGA capabilities with UMG’s broader identity-security architecture, standards, and technology strategy.

Success requires a balanced business and technical leader who can challenge designs, diagnose complex issues, translate cyber risk into practical decisions, lead through influence, and build trusted relationships with security, technology, business, audit, compliance, HR, application, and regional stakeholders.

What Your Impact Will Be

· Strengthen UMG’s identity-security foundations by improving the quality, ownership, governance, and reliability of identities, accounts, entitlements, access decisions, and lifecycle processes.

· Establish and execute a multi-year IGA roadmap while stabilizing near-term control performance, including User Access Reviews, remediation, evidence, data quality, workflow reliability, and ownership accountability.

· Reduce inappropriate, excessive, stale, orphaned, and otherwise unmanaged access through risk-based governance, automation, clear accountability, and measurable control outcomes.

· Translate business requirements, cyber risk, audit findings, control objectives, and architectural direction into prioritized capabilities, sustainable operating processes, and measurable results.

· Improve the experience of business reviewers, application owners, access approvers, and technology partners while maintaining the rigor required for identity security and auditability.

· Build a high-performing IGA team and strengthen the broader identity organization through mentoring, shared standards, technical leadership, and effective cross-functional partnership.

Job Functions

· Lead the strategy, operating model, roadmap, governance, and day-to-day execution of UMG’s Identity Governance and Administration program.

· Serve as the enterprise IAM deputy to the VP, Security & Identity, helping align identity governance, identity engineering, access management, privileged access, authentication, and related identity product functions around common security outcomes and priorities.

· Directly lead, coach, and develop the IGA/Saviynt team; establish priorities, clarify accountability, remove obstacles, and promote a collaborative, security-minded culture.

· Partner with the Sr. Security & Identity Architect to evaluate identity-security designs, establish practical standards and patterns, prioritize roadmap investments, and translate architectural direction into sustainable IGA capabilities and operating processes.

· Serve as the business and governance product owner for Saviynt and related IGA capabilities, working with internal engineering teams, implementation partners, and vendors to define requirements, manage roadmaps, and deliver measurable improvements.

· Own the end-to-end lifecycle of Saviynt User Access Review campaigns, including scope, population and data validation, reviewer and owner assignment, launch, reminders, escalations, remediation, certification, evidence, and formal closure.

· Establish and maintain the UAR campaign calendar and readiness process, confirming that application data, entitlements, owners, reviewers, communications, dependencies, and support processes are prepared before launch.

· Lead the continuous improvement of joiner, mover, and leaver processes, including identity creation, change detection, access updates, termination, deprovisioning, exception handling, and evidence of timely execution.

· Govern access-request, approval, provisioning, deprovisioning, and recertification processes across applications, infrastructure, cloud platforms, and other enterprise services.

· Establish effective governance for roles, entitlements, access packages, privileged access relationships, segregation-of-duties policies, high-risk access, service accounts, application accounts, and other non-human identities.

· Define and improve data ownership models for authoritative identity sources, application accounts, entitlements, organizational attributes, manager relationships, and access metadata.

· Improve the reliability of data synchronization and reconciliation relationships across HR, directories, identity platforms, applications, cloud services, service-management platforms, and other systems of record.

· Monitor and improve data quality, connector health, reconciliation, workflow execution, notification, reporting, access-removal, and user-experience performance; identify root causes and coordinate sustainable resolution.

· Translate policy, control, audit, risk, architecture, and business requirements into functional requirements, user stories, acceptance criteria, test plans, implementation plans, operating procedures, and support models.

· Manage the Saviynt enhancement, defect, integration, and technical-debt backlog; prioritize work using cyber risk, business impact, control effectiveness, operational resilience, user experience, and implementation complexity.

· Establish appropriate governance for platform releases, configuration changes, workflow changes, integrations, access models, and other changes that may affect identity-security controls.

· Define and report meaningful metrics, key performance indicators, and risk indicators, including campaign completion and timeliness, exception volume, remediation aging, access-removal effectiveness, data-quality trends, orphaned ownership, workflow and integration health, control performance, and vendor service levels.

· Provide concise and actionable updates to governance forums and senior leadership on readiness, status, risks, issues, exceptions, remediation progress, decisions required, and the business impact of unresolved identity risks.

· Partner with application owners, entitlement owners, business reviewers, IAM Engineering, Security Architecture, Security Operations, GRC, Audit, Compliance, HR, Service Management, regional IT teams, and external providers to drive accountability and results.

· Support internal and external audits, control testing, regulatory inquiries, and risk assessments; respond to findings, develop remediation plans, and track corrective actions through closure.

· Establish and maintain governance documentation, including standards, procedures, RACI models, data-ownership models, campaign playbooks, workflow documentation, communication templates, issue and decision logs, training materials, and audit evidence.

· Lead stakeholder adoption and process change, using feedback and operational data to simplify processes without weakening identity-security controls.

· Provide business and technical consulting on identity governance, helping stakeholders understand the cyber risk, control intent, technical tradeoffs, and practical path forward.

· Mentor leaders and practitioners across the broader identity product organization, including through shared practices, design reviews, technical coaching, and career development.

· Manage strategic vendors and service providers; establish expectations for deliverables, quality, service levels, issue resolution, roadmap alignment, and escalation.

· Balance operational stability, control execution, platform modernization, project delivery, and strategic improvement in a global, fast-paced, and geographically distributed environment.

This role is based in Nashville and requires in-office attendance Tuesday through Thursday.

Job Requirements

Essential

· Minimum of ten years of progressive experience in Identity and Access Management, Identity Governance and Administration, cybersecurity, technology risk, security architecture, consulting, or a closely related field; equivalent education and experience may be considered.

· Minimum of five years leading enterprise IAM, IGA, security-governance, product, consulting, or technology-risk programs, including experience leading teams or complex cross-functional workstreams.

· Demonstrated production experience with Saviynt, SailPoint, or other IGA platforms, including platform administration or configuration, User Access Reviews and access-certification campaigns, workflows, reporting, troubleshooting, integrations, and continuous improvement.

· Strong practical knowledge of Saviynt or another enterprise IGA platform; experience with both Saviynt and SailPoint is preferred.

· Deep understanding of identity-governance processes and controls, including joiner-mover-leaver, access requests and approvals, provisioning and deprovisioning, UAR and certifications, roles and entitlements, segregation of duties, least privilege, exception management, auditability, and control evidence.

· Demonstrated understanding of identity data ownership, authoritative sources, synchronization and reconciliation relationships, data-quality management, and the dependencies between HR, directories, IGA platforms, applications, cloud services, and service-management platforms.

· Experience governing human and non-human identities, including service accounts, application accounts, shared accounts, technical identities, and other machine-to-machine access.

· Ability to understand and challenge technical designs, diagnose complex workflow or integration issues, assess tradeoffs, and distinguish sustainable control improvements from short-term operational workarounds.

· Experience translating business needs, security risks, control requirements, audit findings, and architectural direction into practical roadmaps, functional requirements, operating processes, and measurable outcomes.

· Demonstrated business and technical consulting experience, preferably across multiple industries, complex enterprises, or geographically distributed and matrixed organizations.

· Experience partnering with security architects, engineers, application owners, HR, business leaders, audit, compliance, risk, and external vendors.

· Strong program and product-management skills, with the ability to manage concurrent priorities, dependencies, roadmaps, releases, risks, issues, decisions, and stakeholder expectations.

· Excellent written and verbal communication skills, including the ability to explain technical identity issues and cyber risk clearly to business stakeholders, technology teams, executives, auditors, and control owners.

· Demonstrated leadership and ability to influence without authority, build trusted relationships, resolve conflict, drive accountability, and lead through organizational change.

· Experience supporting audits, compliance activities, control testing, risk assessments, remediation plans, and evidence requirements within an IAM, IGA, cybersecurity, or technology-risk environment.

· Strong analytical and problem-solving skills, including the ability to identify patterns, evaluate data quality and control performance, determine root cause, and coordinate practical solutions.

· Exceptional organization, attention to detail, documentation discipline, and follow-through, with the ability to work independently while maintaining a high level of accountability.

Desirable

· Bachelor’s degree in cybersecurity, information systems, computer science, business, risk management, or a related field, or comparable education and experience.

· Relevant Identity & Access Management business and/or technical certifications, publications, speaking experience.

· Experience with adjacent identity and security technologies and data sources, including Workday or another HR system, Active Directory, Microsoft Entra ID, Okta, ServiceNow, privileged access management, cloud platforms, enterprise directories, and application-integration services.

· Working knowledge of identity and security protocols and integration patterns such as SAML, SCIM, OAuth, OpenID Connect, LDAP/LDAPS, APIs, and event-driven integrations.

· Experience with reporting, analytics, and work-management tools such as Jira, Confluence, Monday, and ServiceNow.

· Relevant certifications such as CISSP, CISM, CRISC, CGEIT, ITIL, or a comparable IAM, security, risk, or governance credential.

· Experience operating in a large, global, matrixed organization and leading governance-process change, user adoption, or enterprise transformation.

Perks Playlist:

Join an entrepreneurial, global organization where authenticity, boldness, creativity, connection, drive, and insight aren’t just values—they’re how we work every day. Here are some of the ways we support you along the way (and just a few of the benefits we offer):

• Comprehensive medical, dental, and vision coverage

• Including 100% coverage for out-patient in-network mental health services

• Fertility coverage for eligible medical plan participants

• Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year)

• Student Loan Repayment Assistance and Tuition Reimbursement

• 401(k) with 100% immediate vesting on the first 5% of your contributions, plus an additional UMG contribution

A variety of ways to prioritize much-needed time away from work including:

• Flexible Paid Time Off (PTO) for exempt employees

• 3-weeks PTO for non-exempt employees

• 2-weeks paid Winter Break

• 10 Company Holidays (including Juneteenth and Wellbeing Day)

• Summer Fridays (between Memorial Day and Labor Day)

• Generous paid parental leave for every type of parent

Check out our full overview of benefits on the Perks Playlist page of the career site.

Disclaimer: This job description only provides an overview of job responsibilities that are subject to change.

Universal Music Group is an Equal Opportunity Employer

We are an E-Verify employer in Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah.

Please note, UMG is not enrolled in E-Verify in California and New York, and cannot support employment of candidates whose employer must enroll in E-Verify, for example candidates on STEM-OPT.

For more information, please click on the following links.

E-Verify Participation Poster: English / Spanish

E-Verify Right to Work Poster: English | Spanish

Job Category:

Technology

Salary Range:

$122,150 - $200,000

The actual base salary offered depends on a variety of factors, which may include, as applicable, the qualifications of the individual applicant for the position, years of relevant experience, specific and unique skills, level of education attained, certifications or other professional licenses held, and the location in which the applicant lives and/or from which they will be performing the job. All candidates are encouraged to apply.