Enterprise IAM Product Owner (Associate Director)

The Clorox Company is seeking an Enterprise IAM Product Owner (Associate Director) to help shape and deliver enterprise identity security capabilities within its Cybersecurity organization. In this onsite hybrid role in Durham, NC, you will own the enterprise Identity & Access Management (IAM) product strategy and roadmap, guiding how Clorox protects identities across workforce, privileged, machine, application, and AI agent ecosystems.

What you’ll do

• Define and communicate an IAM vision, strategy, and roadmap aligned to organizational security and business objectives.
• Own enterprise identity strategy for workforce, privileged, machine, application, and AI agent identities.
• Ensure IAM capabilities scale with resilience, flexibility, and operational effectiveness.
• Establish and enforce IAM standards, governance processes, and policies, maintaining supporting documentation and operating procedures.
• Monitor emerging technologies, threat trends, identity security risks, and regulatory developments, and incorporate them into the roadmap.
• Drive adoption of Zero Trust principles throughout identity and access management capabilities.
• Lead the evolution of Identity Governance & Administration (IGA), including identity lifecycle management, joiner-mover-leaver processes, access requests, role management, birthright access, and access certifications.
• Help ensure effective governance across workforce, contractor, partner, privileged, and non-human identities.
• Advance least-privilege access, segregation of duties, and continuous access review processes.
• Define and implement governance and controls for AI agents, machine identities, service accounts, APIs, service principals, and application identities.
• Set standards and guardrails for AI agent identities, including identity proofing, credential management, least-privilege access, segregation of duties, and continuous oversight.
• Collaborate with AI, data, and application teams to integrate identity security controls into AI platforms, autonomous systems, AI agents, and agentic workflows.
• Develop approaches to manage and secure non-human identities, including secrets, certificates, tokens, API credentials, service accounts, and cryptographic keys.
• Define governance and risk management controls for AI-enabled applications and autonomous systems to support secure, auditable, and compliant identity operations.
• Own enterprise strategy for modern authentication, including MFA, passwordless, and adaptive access controls, including transition from password-based authentication to phishing-resistant passwordless technologies.
• Establish governance and standards for authentication technologies such as FIDO2 security keys, passkeys, Microsoft Authenticator, Windows Hello for Business, certificate-based authentication, and biometric authentication.
• Partner with Security Operations, Identity Engineering, and End User Experience to strengthen authentication security while reducing end-user friction.
• Leverage Conditional Access, risk-based authentication, device trust, and contextual access controls to improve identity protection.
• Define KPIs and metrics to measure adoption, effectiveness, and risk reduction across MFA and passwordless capabilities.
• Integrate Identity Threat Detection & Response (ITDR) into the IAM roadmap and operating model, partnering with Cyber Defense and Security Operations.
• Develop product roadmaps and release plans, prioritize backlogs using Agile methodologies, and coordinate resource allocation to deliver high-quality outcomes.
• Work with engineering and cross-functional partners to translate business requirements into actionable features and user stories.

What you bring

• 10+ years of experience in Identity & Access Management (IAM), Cybersecurity, and Product Management, including leadership experience as a Product Owner (must have direct management experience).
• Deep expertise in IAM domains including IGA, PAM, Identity Lifecycle Management, RBAC, and Zero Trust.
• Hands-on experience with enterprise IAM platforms such as Microsoft Entra ID, SailPoint, Delinea, and SAP Identity Authentication Service (IAS), supporting SSO, federation, authentication, provisioning, and lifecycle management.
• Proven ability to create IAM strategies, governance frameworks, operating models, and multi-year transformation roadmaps.
• Experience securing workforce, privileged, machine, application, service, and other non-human identities in complex enterprise environments.
• Knowledge of governance and security controls for AI agents, service accounts, APIs, service principals, machine identities, and emerging non-human identity use cases.
• Demonstrated success leading enterprise-scale initiatives including MFA, passwordless, adaptive authentication, Conditional Access, and phishing-resistant authentication solutions.
• Expertise with modern authentication technologies: FIDO2, passkeys, Windows Hello for Business, Microsoft Authenticator, and certificate-based authentication.
• Strong cross-functional leadership partnering across cybersecurity, infrastructure, cloud, HR, digital, and business teams.
• Understanding of ITDR, identity security monitoring, risk management, regulatory compliance, data privacy requirements, and industry security certifications including CISSP, CISM, CISA, CCSP, SC-100, or SC-300.

Workplace and compensation

Location: Durham, NC (onsite)

Workplace type: Hybrid - 3 days in office, 2 days remote

Salary range: USD 131,300 - 316,700 per year

Benefits

• Comprehensive, competitive benefits that prioritize wellbeing
• Robust health plans
• Market-leading 401(k) program with company match
• Flexible time off benefits, including half-day summer Fridays depending on location
• Inclusive fertility/adoption benefits
• Participation in Clorox incentive plans (subject to applicable plan documents and policies)