Clorox is the place that’s committed to growth – for our people and our brands. Guided by our purpose and values, and with people at the center of everything we do, we believe every one of us can make a positive impact on consumers, communities, and teammates. Join our team. #CloroxIsThePlace
Your role at Clorox:
We are seeking a highly skilled and motivated Enterprise Identity & Access Management (IAM) Product Owner to lead the strategy, governance, and delivery of identity security capabilities across the enterprise.
As an IAM Product Owner within the Cybersecurity organization, you will play a pivotal role in defining and delivering secure, scalable, and modern identity services for workforce, privileged, machine, application, and AI agent identities. You will serve as the bridge between business stakeholders, cybersecurity, architecture, and engineering teams, ensuring IAM capabilities align with business objectives, regulatory requirements, and evolving security threats.
This role owns the enterprise IAM roadmap and product strategy, encompassing Identity Governance & Administration (IGA), Privileged Access Management (PAM), modern authentication, multi-factor authentication (MFA), passwordless authentication, Identity Threat Detection & Response (ITDR), and governance of machine and AI agent identities. The role is responsible for driving the organization's transition toward phishing-resistant, passwordless authentication while enabling secure access across workforce, privileged, application, machine, and AI-powered environments.
In this role, you will:
Strategy & Governance
- Define and communicate a compelling IAM vision, strategy, and roadmap that aligns with organizational security and business objectives.
- Own the enterprise identity strategy for workforce, privileged, machine, application, and AI agent identities.
- Align IAM capabilities with organizational goals, ensuring scalability, flexibility, resilience, and operational effectiveness.
- Establish and enforce IAM standards, governance processes, and policies while maintaining supporting documentation and operating procedures.
- Ensure IAM platforms and services adhere to internal standards, industry best practices, and regulatory requirements.
- Monitor emerging technologies, threat trends, identity security risks, and regulatory developments, incorporating them into the IAM strategy and roadmap.
- Drive adoption of Zero Trust principles throughout identity and access management capabilities.
Identity Governance & Administration
- Lead the strategy and evolution of Identity Governance & Administration (IGA) capabilities, including identity lifecycle management, joiner-mover-leaver processes, access requests, role management, birthright access, and access certifications.
- Ensure effective governance of workforce, contractor, partner, privileged, and non-human identities.
- Drive least-privilege access models, segregation of duties, and continuous access review processes.
Non-Human & AI Agent Identity Security
- Define and implement governance, lifecycle management, authentication, authorization, and monitoring controls for AI agents, machine identities, service accounts, APIs, service principals, and application identities.
- Establish standards and guardrails for AI agent identities, ensuring appropriate identity proofing, credential management, least-privilege access, segregation of duties, and continuous oversight.
- Collaborate with AI, data, and application teams to integrate identity security controls into AI platforms, autonomous systems, AI agents, and agentic workflows.
- Develop strategies to manage and secure the growing population of non-human identities, including secrets, certificates, tokens, API credentials, service accounts, and cryptographic keys.
- Define governance and risk management controls for AI-enabled applications and autonomous systems to ensure secure, auditable, and compliant identity operations.
Authentication, MFA & Passwordless Security
- Define and lead the enterprise strategy for modern authentication, MFA, passwordless authentication, and adaptive access controls.
- Drive the organization's transition from password-based authentication to phishing-resistant passwordless authentication technologies.
- Establish governance and standards for authentication technologies including FIDO2 security keys, passkeys, Microsoft Authenticator, Windows Hello for Business, certificate-based authentication, and biometric authentication methods.
- Partner with Security Operations, Identity Engineering, and End User Experience teams to improve authentication security while reducing end-user friction.
- Develop authentication strategies that balance security, usability, resilience, and business productivity.
- Leverage Conditional Access, risk-based authentication, device trust, and contextual access controls to strengthen identity protection.
- Measure and drive adoption of MFA and passwordless authentication capabilities through defined security and user experience metrics.
- Ensure authentication and authorization controls are consistently applied across hybrid, cloud, SaaS, machine-to-machine, and AI-enabled environments.
Identity Threat Protection
- Integrate Identity Threat Detection & Response (ITDR) capabilities into the IAM roadmap and operating model.
- Partner with Cyber Defense and Security Operations teams to improve monitoring, detection, and response to identity-based attacks.
- Monitor emerging threats related to credential theft, token compromise, privileged escalation, machine identities, and AI agents, incorporating mitigations into the IAM strategy.
- Drive improvements in identity visibility, risk monitoring, and identity resilience across enterprise environments.
Product Management & Delivery
- Develop and communicate product roadmaps and release plans, outlining strategic priorities, milestones, feature releases, dependencies, and expected business outcomes.
- Prioritize product backlogs and manage resource allocation to ensure timely delivery of high-quality IAM capabilities using Agile methodologies.
- Work with engineering teams to develop and execute against prioritized backlogs and business objectives.
- Conduct user research and gather stakeholder feedback to identify opportunities for continuous improvement.
- Identify business outcomes and solutions that deliver on the product strategy while solving complex security and operational challenges.
- Define key performance indicators (KPIs) and metrics that measure adoption, effectiveness, and risk reduction.
Architecture & Collaboration
- Develop high-level architecture and integration strategies across IAM platforms and supporting technologies.
- Ensure IAM solutions, including SailPoint, Microsoft Entra ID (Azure AD), Active Directory, BeyondTrust, Delinea, and align with enterprise architecture standards.
- Collaborate with Security Architects, Enterprise Architects, Infrastructure teams, HR, AI teams, Application Development, and Digital organizations to translate business requirements into actionable features and user stories.
- Partner with Security and Architecture teams to align identity capabilities with corporate policies, Zero Trust principles, and industry best practices.
What we look for:
- 10+ years of experience in Identity & Access Management (IAM), Cybersecurity and Product Management including leadership experience as a Product Owner. (Must have direct management experience)
- Deep expertise in IAM domains including Identity Governance & Administration (IGA), Privileged Access Management (PAM), Identity Lifecycle Management, Role-Based Access Control (RBAC), and Zero Trust security principles.
- Hands-on experience with enterprise IAM platforms such as Microsoft Entra ID, SailPoint, Delinea, and SAP Identity Authentication Service (IAS), supporting SSO, federation, authentication, provisioning, and identity lifecycle management.
- Proven ability to develop IAM strategies, governance frameworks, operating models, and multi-year transformation roadmaps aligned with business and security objectives.
- Experience securing workforce, privileged, machine, application, service, and other non-human identities across complex enterprise environments.
- Knowledge of governance and security controls for AI agents, service accounts, APIs, service principals, machine identities, and emerging non-human identity use cases.
- Demonstrated success leading enterprise-scale identity security initiatives, including MFA, passwordless authentication, adaptive authentication, Conditional Access, and phishing-resistant authentication solutions.
- Expertise with modern authentication technologies such as FIDO2, passkeys, Windows Hello for Business, Microsoft Authenticator, and certificate-based authentication, including adoption and governance of password less programs.
- Strong cross-functional leadership skills with experience partnering across cybersecurity, infrastructure, cloud, HR, digital, and business teams to deliver enterprise technology solutions.
- Understanding of Identity Threat Detection & Response (ITDR), identity security monitoring, risk management, regulatory compliance, data privacy requirements, and industry security certifications such as CISSP, CISM, CISA, CCSP, SC-100, or SC-300.
#LI-HYBRID
Workplace type:
Hybrid- 3 days in office, 2 days remote
Our values-based culture connects to our purpose and empowers people to be their best, professionally and personally. We serve a diverse consumer base which is why we believe teams that reflect our consumers bring fresh perspectives, drive innovation, and help us stay attuned to the world around us. That’s why we foster an inclusive culture where every person can feel respected, valued, and fully able to participate, and ultimately able to thrive. Learn more.
[U.S.]Additional Information:
At Clorox, we champion people to be well and thrive, starting with our own people. To help make this possible, we offer comprehensive, competitive benefits that prioritize all aspects of wellbeing and provide flexibility for our teammates’ unique needs. This includes robust health plans, a market-leading 401(k) program with a company match, flexible time off benefits (including half-day summer Fridays depending on location), inclusive fertility/adoption benefits, and more.
We are committed to fair and equitable pay and are transparent with current and future teammates about our full salary ranges. We use broad salary ranges that reflect the competitive market for similar jobs, provide sufficient opportunity for growth as you gain experience and expand responsibilities, while also allowing for differentiation based on performance. Based on the breadth of our ranges, most new hires will start at Clorox in the first half of the applicable range. Your starting pay will depend on job-related factors, including relevant skills, knowledge, experience and location. The applicable salary range for every role in the U.S. is based on your work location and is aligned to one of three zones according to the cost of labor in your area.
–Zone A: $157,600 - $316,700
–Zone B: $144,400 - $290,300
–Zone C: $131,300 - $263,900
All ranges are subject to change in the future. Your recruiter can share more about the specific salary range for your location during the hiring process.
This job is also eligible for participation in Clorox’s incentive plans, subject to the terms of the applicable plan documents and policies.
Please apply directly to our job postings and do not submit your resume to any person via text message. Clorox does not conduct text-based interviews and encourages you to be cautious of anyone posing as a Clorox recruiter via unsolicited texts during these uncertain times.
To all recruitment agencies: Clorox (and its brand families) does not accept agency resumes. Please do not forward resumes to Clorox employees, including any members of our leadership team. Clorox is not responsible for any fees related to unsolicited resumes.