Marc Wilson

Innovative, Sr.

Identity Access Management

Governance SME with Director, Sr. Management, Program Management, Implementation Solutions Engineering and Architect background. 20+ years of strong technical working knowledge coupled with strong management skills within the financial, commodities, healthcare, hospitality/tourism and software industries. Very strong experience with information security and concepts with an emphasis on IAM Governance, IAM Program Management, IAM Architecture, Privilege Access, RBAC, Unstructured Data, engineering/analysis/administration of enterprise systems, access provisioning, access review, single sign on and federation.

Ability to translate cybersecurity risk, regulatory and compliance requirements into a coordinated IAM controls framework that can be efficiently adopted by business and technology teams. Quick problem solver in fast paced environments and works well under pressure, with a focus on root cause analysis and incident resolution. Motivated team player with ability to function independently.

Well organized and consistently meets deadlines. Excellent interpersonal and communication skills with the ability to effectively interact with both technical and non-technical staff along with global clientele. Strong focus on customer service, along with strong oral, written and presentation skills.

Sr Technical Cyber Security Manager/Consultant - NEXTera Energy

(2025-05)

• Lead and manage a team of cybersecurity professionals, providing clear direction and support
• Oversee and ensure the security of web applications, SAP systems, Salesforce platforms, and AWS environments
• Drive large-scale projects, including major application changes and transitions from mainframe to distributed applications
• Lead the implementation of RBAC (Role Based Access Control) and Least Privilege principle in order to deliver operational efficiency and reduce business risk
• Led the enterprise rollout and developed a phased, risk-based adoption strategy for Passwordless authentication
• Initiated a Proof of Concept for Secure Identity Proofing with a focus on offshore contractors leveraging AWS Workspace
• Spearheaded a pilot program for identity proofing, testing, and validating new vendor technologies (1Kosmos) to enhance remote onboarding security
• Collaborate with cross-functional teams to ensure seamless integration and security compliance
• Develop and implement cybersecurity policies, procedures, and best practices
• Conduct regular security assessments and audits to identify and mitigate risks
• Stay updated with the latest cybersecurity trends and threats, and proactively address potential vulnerabilities

Cybersecurity Sr. Manager – IAM Access Provisioning Operations - The Home Depot

(2022-04 - 2025-05)

• Managing, developing and maturing a team of IAM engineers, analysts and managed service Cyber resources whose roles and responsibilities affect every aspect within the Home Depot enterprise in the Cybersecurity/Access Provisioning space
• Overseeing day-to-day access provisioning operations and governance of Identity and Access Management processes, systems, including user provisioning, de-provisioning, authentication and authorization mechanisms, and role-based access controls and implementing monitoring and auditing processes to ensure the detection of unauthorized access and that compliance measures are met
• Oversee the continued development of processes and procedures to improve incident and escalation response times, analysis of incidents related to access to systems and data to digital identities of all employee types
• Conducts regular review of IAM assessment and audit checklist in order to identify any gaps and areas of improvement
• Monitor, guide and advise on troubleshooting and remediation methods for daily incidents and escalations of all IAM related lifecycle events that may occur through Workday, Success Factors, Identity Warehouse, Sailpoint IIQ/ISC, Active Directory, Azure, Mainframe and Linux/Unix environments and within existing manual processes
• Led a team of 5 engineers in the migration of legacy systems to GCP (Google Cloud Platform), resulting in a 60% reduction in operational costs
• Engages and partners with internal stakeholders to understand their access requirements and translates them into effective Identity and Access Management solutions
• Ensure Identity and Access Management practices align with regulatory requirements and security standards to reduce risks and vulnerabilities
• Guide teams in strategy, alignment, analysis and execution to ensure priorities objectives/deliverable are met
• Responsible for providing management oversight & control reviews of end-to-end IAM processes and controls

Senior Identity & Access Management Engineer / Technical Lead (Consultant) - Battelle Memorial Institute

(2021-04 - 2022-04)

• Document requirements for a role entitlement management system with a staff Identity concept over accounts and access
• Lead a system(s) selection initiative through the Request for Proposal (RFP) process for a Role Based Access Control & Entitlement Management (RBAC/EM) system. Present to leadership an approach to selecting and leveraging a Vendor supported or in house written software solution
• Manage and be accountable for the RBAC/EM program throughout its roadmap, from an initial pilot implementation of the core environment for a subset of systems (cloud and on-premise), through centralization of access management processes across the enterprise
• Work with system owners, specifically ERP at first, to build and enable best practice application role design, integrations with other systems such as HR for attribute based automated access, and entitlement management processes
• Create and maintain the roadmap for Battelle's identity and access management program
• Support compliance efforts, specifically CMMC at first, in designs, best practices, and early solutions
• Own privileged access as a type of role and understand the delineation between a RBAC/EM and password vault/safe
• Work with internal software architects to align with Open API efforts
• Provide expert systems analysis and support for security and compliance
• Provide expert technical consulting and support for security issues requiring unique and complex problem solving in creative effective ways which have a broad impact on the business
• Identify technologies with sustainable impact which contributes to the securing Battelle's IT infrastructure
• Supports risk assessments to ensure compliance with security policies and develops security designs to support logging, auditing, and reporting
• Partner with the system owners, audit, and compliance stakeholders to support the management of access management risks and compliance requirements across the organization
• Provides technical and staff/contractor leadership for projects
• Maintains industry facing awareness and manages a self-directed professional improvement program. Monitors progress against individually selected goals, assists with goal selection

Director, Identity and Access Management - Carnival Corporation & plc

(2020-01 - 2021-04)

Global Information Security & Compliance Services (GISCS)

Sr. Global Security Systems Manager, Identity and Access Management - Carnival Corporation & plc

(2018-10 - 2019-12)

Global Information Security & Compliance Services (GISCS)

• Manage global IAM technical and non-technical teams and coordinate with offshore support regarding incidents, system maintenance, enhancements and projects as it relates to IAM solutions Sailpoint IIQ and Beyond Trust Privilege Access
• Responsible for the continued growth and maturity of the overall IAM program and team of a multi-brand corporation
• Assist with developing the GISCS security program IAM strategic roadmap to implement projects and initiatives
• Implement governance frameworks and IT technologies for all aspects of IAM such as Authentication, Privilege Access Controls, Identity Governance, SSO and Identity Directory
• Led Okta's SSO feature for Workday implementations both from a technical perspective and advisory role
• Develop standards aligned with industry best practices (NIST, COBIT), perform gap assessments, and execute on remediation plans. Conduct risk assessments and implement remediation plans
• Executed and implemented controls and procedure to meet regulatory requirements for SOX, PCI, GDPR and HIPAA
• Develop the IAM operational model for the support of Sailpoint and Beyond Trust and the IAM control framework
• Ensure that the IAM compliance requirements are met and that remediation is performed within agreed timelines
• Responsible for expanding the use of Beyond Trust PAM solution in the enterprise environment along with defining and creating security rules/policies for Privilege Access
• Enhanced cloud security by configuring IAM roles and policies, resulting in a 60% decrease in unauthorized access incidents
• Automated backup processes using GCP Cloud Scheduler, reducing data loss incidents by 40%
• Develop the security framework and standards for the identification, securing and the managing of privileged credentials for both Global and Regional systems
• Tasked with analyzing business needs, applying technology through application configuration, implementation of new functionality