IT Director, Identity & Directory Services (HYBRID)

McCormick Canada continues its long track record of growth and is a respected leader in the spice, seasoning, flavouring and specialty food industry. Our consumer products division serves retail grocery customers and emerging channels with Club House, Billy Bee and McCormick products, while our Custom Flavour Solutions division serves food service distributors and other respected food manufacturers across Canada. McCormick Canada is part of the world leader in spice and seasonings, McCormick & Company Inc.

The Power of People is one of our five pillars. It has been the foundation for McCormick's success for decades. There is something inspiring about working at McCormick. We have created an unusually dedicated workforce by fostering a culture of respect, recognition, inclusion and collaboration based on the highest ethical values. Without our employees, our success is not possible. Our commitment to our customers, our consumers and our employees is unsurpassed.

Position Overview

The Director, Identity and Access Management (IAM) is responsible for defining and executing the global strategy for enterprise identity and access management and directory services at McCormick. This leader is accountable for secure, reliable and scalable access to business applications and technology platforms, including directory infrastructure, authentication, authorization, privileged access and identity lifecycle services.

The role leads modernization and automation of IAM capabilities across cloud and on-premises environments, strengthens identity-related controls in partnership with Cybersecurity, and drives a consistent, efficient employee and partner experience. The Director leads internal teams and managed service providers and maintains clear accountability for service performance, resilience and a multi-year modernization roadmap.

Key Responsibilities

• Define and execute the enterprise IAM and Directory services strategy, standards and roadmap aligned with business needs, Cybersecurity and Enterprise Architecture.
• As the Product Line leader for IAM and Directory Services, establish a 12–24-month modernization roadmap, simplifying legacy directory and authentication architecture and reducing technical debt.
• Lead engineering, delivery and lifecycle management of enterprise IAM services, including Active Directory, Microsoft Entra ID, hybrid directory services, SSO, MFA, federation, access provisioning and privileged access capabilities.
• Establish standardized identity and access patterns for applications, cloud services, employee, partner and non-human identities.
• Oversee platform resilience, recovery, change management, configuration standards and operational readiness.
• Drive IAM automation and access lifecycle improvement.
• Automate joiner, mover and leaver workflows, provisioning, deprovisioning, entitlement changes and access fulfillment through HR and service management integrations.
• Use APIs, scripting and repeatable engineering practices to reduce manual effort, improve accuracy and shorten fulfillment times.
• Partner with Cybersecurity to strengthen enterprise access controls and reduce risk.
• Advance least-privilege, privileged access management, identity governance, access reviews, service-account controls and audit readiness.
• Address vulnerabilities, control gaps and audit findings while balancing risk, usability and business continuity.
• Build and lead a high-performing global IAM and directory services organization.
• Direct internal teams and managed service providers; establish ownership, service levels, performance measures and continuous-improvement routines.
• Develop talent, manage vendor performance and collaborate with Digital Workplace, Cloud, Applications, HR and Service Management.
• Own IAM service economics, stakeholder communications and measurable delivery outcomes.
• Prioritize investments, manage budgets and licensing, report operational performance and guide adoption of enterprise IAM standards.

Secondary Responsibilities

Participate in enterprise architecture discussions, technology risk and change governance; support audits, disaster recovery exercises and major incidents involving IAM services. Evaluate emerging IAM capabilities and contribute to enterprise technology standards, service introduction and continuous improvement.

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Engineering or a related discipline, or equivalent relevant experience
• Relevant technical certifications in Microsoft identity platforms, IAM, cloud or information security are beneficial.
• At least 10 years of progressive enterprise technology experience, including leadership in IAM, directory services, infrastructure or security-related engineering and operations.
• Demonstrated expertise with Active Directory, Microsoft Entra ID, hybrid identity, authentication, SSO, MFA, directory protocols and modern access management practices.
• Experience automating identity lifecycle processes, implementing access governance and privileged access capabilities, and managing services in complex global environments.
• Experience leading internal technical teams and managed service providers through operational improvement and platform modernization.
• Experience with IAM governance and privileged access platforms such as SailPoint, Saviynt, CyberArk or comparable technologies; familiarity with ServiceNow integrations.
• Experience modernizing legacy directories, implementing cloud-first identity architecture and supporting business integration or organizational transformation.
• Experience influencing senior leaders across regions and organizational boundaries, with demonstrated success leading large-scale change.

#LI-NP2

In the spirit of pay transparency, we are excited to share the base salary range for this position is $140,750-$190,750

Base salary compensation will be determined based on factors such as geographic location, skills, education, experience for this role, and/or internal equity of our current employees as part of any final offer. This position is also eligible to participate in McCormick’s Incentive Bonus (MIB) Plan. In addition to a competitive compensation package, permanent employees of McCormick Canada are eligible for our extensive Total Rewards programs that include:

Comprehensive health plans covering medical, vision, dental, life and disability benefits

Family-friendly benefits such as maternity leave top-up and Employee Assistance Program

Retirement and investment programs including a matching DC pension plan, group RRSP, and Employee Stock Purchase Plan

This posting is for a new position within McCormick.

Please note that McCormick does not use artificial intelligence (AI) tools in the recruitment process.

Throughout the selection process, accommodations for applicants with disabilities are available upon request. Please notify H.R. if required.