Staff Privileged Access Solutions Manager

Location: Hershey, PA Why Hershey: At The Hershey Company, our culture is rooted in purpose and inspired by Milton Hershey’s enduring vision that business should create opportunity for others. Through our commitment to corporate philanthropy, we create positive impact by supporting communities, helping children thrive, and operating as a business for good. This includes our deep and long standing partnership with Milton Hershey School, where we invest in education, workforce readiness, and hands on engagement to help students succeed beyond the classroom. Supported by strategic grantmaking, product donations, cross brand collaboration, and strong employee volunteerism, Hershey offers a place to work where making a difference—locally and globally—is part of how we do business every day. About The Hershey Company The Hershey Company is an industry-leading snacks company known for making more moments of goodness through its iconic brands. With a strong portfolio across chocolate, confectionery, and salty snacks, Hershey delights consumers every day. Our beloved brands include Hershey’s, Reese’s, KitKat®, Dots Pretzels, Lesser Evil, Jolly Rancher, Twizzlers, Ice Breakers, and more. At Hershey, we are committed to making a meaningful difference in the communities where we live, work, and do business. This commitment originated with our founder, Milton Hershey, and continues to shape who we are today. Guided by our employee value proposition, Lead Today. Create Tomorrow, we empower our people to drive impact now while shaping what comes next. Our One Hershey mindset brings teams together across functions, geographies, and businesses, enabling us to operate with speed, collaboration, and shared purpose. The Hershey Company is proud to be recognized as a top employer in the United States, reflecting our commitment to our people, culture, and purpose. How will you fit in the big picture? This is a unique opportunity to lead the evolution of Hershey’s enterprise Privileged Access Management (PAM) program and help protect the company’s most critical systems, credentials, and privileged access pathways. As a strategic leader within the Identity and Access Management (IAM) organization, you will define and execute the vision, roadmap, and operating model for Hershey’s PAM capability. You will drive initiatives that strengthen privileged access controls, support Zero Trust objectives, improve operational maturity, and reduce enterprise security risk across a complex global environment. Working closely with Information Security, infrastructure, application, cloud, audit, compliance, and business teams, you will lead the full PAM lifecycle from strategy and prioritization through implementation, adoption, measurement, and continuous improvement. This role also provides the opportunity to lead and influence managed service providers, offshore operations, and cross-functional project teams while delivering enterprise-wide security outcomes. What will you do? Define, enhance, and execute the enterprise PAM strategy, roadmap, governance model, and operating standards. Lead PAM program planning, prioritization, risk management, resource coordination, and delivery. Partner with infrastructure, cloud, application, security, audit, compliance, and business teams to prioritize PAM onboarding and adoption based on risk and business impact. Manage the full privileged account lifecycle, including discovery, onboarding, credential vaulting, rotation, access reviews, session monitoring, and decommissioning. Expand PAM coverage across administrator accounts, service accounts, application accounts, APIs, secrets, automation credentials, and cloud privileged access. Oversee PAM platform operations, vendor relationships, managed service delivery, incident support, and overall program performance. Establish metrics, reporting, adoption indicators, and control effectiveness measures to demonstrate risk reduction and program maturity. Drive automation, process simplification, operational efficiency, and user experience improvements while maintaining strong security controls. Support audits, control testing, investigations, remediation activities, and evidence collection. Provide leadership and direction to internal resources, managed service partners, and cross-functional project teams. Minimum Education & Requirements Minimum Requirements Experience: Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field; equivalent experience may be considered. 5+ years of experience in information technology, cybersecurity, identity and access management, security operations, security architecture, or security governance. 3+ years of experience supporting, implementing, operating, or leading Privileged Access Management capabilities. 3+ years of experience leading cross-functional initiatives, technical teams, managed service providers, or partner resources. Experience partnering with infrastructure, application, cloud, audit, compliance, security operations, and business stakeholders. Experience supporting audit activities, control testing, remediation tracking, evidence collection, and reporting. Strong knowledge of privileged account lifecycle management, credential vaulting, session monitoring, access reviews, secrets management, and privileged risk reduction. Proven ability to influence stakeholders, prioritize workstreams, drive accountability, and deliver measurable outcomes in a complex enterprise environment. Education: Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related discipline; equivalent experience may be considered. Preferred Qualifications: Experience with CyberArk, BeyondTrust, Delinea, HashiCorp Vault, or similar PAM and secrets management platforms. Experience integrating PAM solutions with Active Directory, Microsoft Entra ID, SailPoint, ServiceNow, SIEM/SOC tools, cloud platforms, and endpoint privilege management solutions. Experience with PowerShell, Python, Java, or similar scripting and automation tools. Knowledge of Windows/Linux administration, networking, firewalls, VPNs, DNS, databases, application servers, and secure configuration practices. Experience developing PAM metrics, dashboards, reporting, and maturity roadmaps. Relevant certifications such as CISSP, CISM, CRISC, Security+, CyberArk, BeyondTrust, Delinea, HashiCorp, Azure, or AWS. Benefits and Perks At Hershey, we offer competitive pay and a comprehensive total rewards package designed to support your wellbeing, financial security, and life outside of work. Health & Wellbeing: Medical, dental, and vision coverage, plus wellness programs that support your physical and mental health. Financial Security: Competitive pay, annual incentive opportunities, and a 401(k) with company match. Time Off & Flexibility: Paid time off, company holidays, and flexible ways of working where applicable. Growth & Development: Career development programs, learning opportunities, and internal mobility. The Hershey Company is an Equal Opportunity Employer. The policy of The Hershey Company is to extend opportunities to qualified applicants and employees on an equal basis regardless of an individual's race, color, gender, age, national origin, religion, citizenship status, marital status, sexual orientation, gender identity, transgender status, physical or mental disability, protected veteran status, genetic information, pregnancy, or any other categories protected by applicable federal, state or local laws. The Hershey Company is an Equal Opportunity Employer - Minority/Female/Disabled/Protected Veterans. You may request a reasonable accommodation if you are unable or limited in your ability to use or access our online application process as a result of a disability. You can request an accommodation via phone or email. To request an accommodation via phone, please call +1 877-804-1794 and leave a voicemail with your contact information. You may also email a request for accommodation to . Please be sure to include “Accommodation Needed” in the subject line. This will ensure that your email is routed to the appropriate contact who will handle your request. #LI-KR1 #LI-Onsite