Senior Manager, Identity Governance

We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.

Job Summary

As a key member of UMG Global Tech’s Security & Identity organization, the Senior Manager, Identity Governance & Administration leads UMG’s Identity Governance and Administration capability and serves as the enterprise IAM deputy for governance, operating model, roadmap, and execution. This role is accountable for the security, effectiveness, scalability, and continuous improvement of UMG’s IGA processes and platforms, with primary responsibility for Saviynt and related identity-governance capabilities.

This is an identity-security leadership role, not simply an IT operations or account-administration role. The Senior Manager treats identity as a foundational security control and enterprise risk domain. They ensure that identity data, access decisions, entitlements, workflows, lifecycle events, and governance evidence are designed and operated in a way that reduces cyber risk, supports business outcomes, and enables sustainable global operations.

The Senior Manager directly leads the IGA/Saviynt team and mentors leaders and practitioners across UMG’s other identity product functions. The role reports directly to the VP, Security & Identity and works as a peer leader with the Sr. Security & Identity Architect. The Senior Manager owns IGA strategy, operating model, platform outcomes, and control execution, while partnering with the Architect to align IGA capabilities with UMG’s broader identity-security architecture, standards, and technology strategy.

Success requires a balanced business and technical leader who can challenge designs, diagnose complex issues, translate cyber risk into practical decisions, lead through influence, and build trusted relationships with security, technology, business, audit, compliance, HR, application, and regional stakeholders.

What Your Impact Will Be

• Strengthen UMG’s identity-security foundations by improving the quality, ownership, governance, and reliability of identities, accounts, entitlements, access decisions, and lifecycle processes.

• Establish and execute a multi-year IGA roadmap while stabilizing near-term control performance, including User Access Reviews, remediation, evidence, data quality, workflow reliability, and ownership accountability.

• Reduce inappropriate, excessive, stale, orphaned, and otherwise unmanaged access through risk-based governance, automation, clear accountability, and measurable control outcomes.

• Translate business requirements, cyber risk, audit findings, control objectives, and architectural direction into prioritized capabilities, sustainable operating processes, and measurable results.

• Improve the experience of business reviewers, application owners, access approvers, and technology partners while maintaining the rigor required for identity security and auditability.

• Build a high-performing IGA team and strengthen the broader identity organization through mentoring, shared standards, technical leadership, and effective cross-functional partnership.

Job Functions

• Lead the strategy, operating model, roadmap, governance, and day-to-day execution of UMG’s Identity Governance and Administration program.

• Serve as the enterprise IAM deputy to the VP, Security & Identity, helping align identity governance, identity engineering, access management, privileged access, authentication, and related identity product functions around common security outcomes and priorities.

• Directly lead, coach, and develop the IGA/Saviynt team; establish priorities, clarify accountability, remove obstacles, and promote a collaborative, security-minded culture.

• Partner with the Sr. Security & Identity Architect to evaluate identity-security designs, establish practical standards and patterns, prioritize roadmap investments, and translate architectural direction into sustainable IGA capabilities and operating processes.

• Serve as the business and governance product owner for Saviynt and related IGA capabilities, working with internal engineering teams, implementation partners, and vendors to define requirements, manage roadmaps, and deliver measurable improvements.

• Own the end-to-end lifecycle of Saviynt User Access Review campaigns, including scope, population and data validation, reviewer and owner assignment, launch, reminders, escalations, remediation, certification, evidence, and formal closure.

• Establish and maintain the UAR campaign calendar and readiness process, confirming that application data, entitlements, owners, reviewers, communications, dependencies, and support processes are prepared before launch.

• Lead the continuous improvement of joiner, mover, and leaver processes, including identity creation, change detection, access updates, termination, deprovisioning, exception handling, and evidence of timely execution.

• Govern access-request, approval, provisioning, deprovisioning, and recertification processes across applications, infrastructure, cloud platforms, and other enterprise services.

• Establish effective governance for roles, entitlements, access packages, privileged access relationships, segregation-of-duties policies, high-risk access, service accounts, application accounts, and other non-human identities.

• Define and improve data ownership models for authoritative identity sources, application accounts, entitlements, organizational attributes, manager relationships, and access metadata.

• Improve the reliability of data synchronization and reconciliation relationships across HR, directories, identity platforms, applications, cloud services, service-management platforms, and other systems of record.

• Monitor and improve data quality, connector health, reconciliation, workflow execution, notification, reporting, access-removal, and user-experience performance; identify root causes and coordinate sustainable resolution.

• Translate policy, control, audit, risk, architecture, and business requirements into functional requirements, user stories, acceptance criteria, test plans, implementation plans, operating procedures, and support models.

• Manage the Saviynt enhancement, defect, integration, and technical-debt backlog; prioritize work using cyber risk, business impact, control effectiveness, operational resilience, user experience, and implementation complexity.

• Establish appropriate governance for platform releases, configuration changes, workflow changes, integrations, access models, and other changes that may affect identity-security controls.

• Define and report meaningful metrics, key performance indicators, and risk indicators, including campaign completion and timeliness, exception volume, remediation aging, access-removal effectiveness, data-quality trends, orphaned ownership, workflow and integration health, control performance, and vendor service levels.

• Provide concise and actionable updates to governance forums and senior leadership on readiness, status, risks, issues, exceptions, remediation progress, decisions required, and the business impact of unresolved identity risks.

• Partner with application owners, entitlement owners, business reviewers, IAM Engineering, Security Architecture, Security Operations, GRC, Audit, Compliance, HR, Service Management, regional IT teams, and external providers to drive accountability and results.

• Support internal and external audits, control testing, regulatory inquiries, and risk a