Description: About the Role
As Hearst's businesses build and adopt AI agents at an accelerating pace, every connection those agents make to internal systems APIs, cloud services, collaboration tools, data stores generates a machine identity that must be provisioned, monitored, and governed. These credentials proliferate fast, operate autonomously, and fall entirely outside the governance models built for human users.
Hearst Technology Services is hiring a Senior Business Analyst to own and drive the Machine Identity & Agentic AI Governance program end-to-end. This is a newly created, high-visibility role that sits at the intersection of Identity, Cloud, Enterprise Applications, and Cybersecurity. You'll lead the rollout and operationalization of HTS's non-human identity (NHI) governance platform, build the processes and workflows that let Hearst's lines of business move fast with appropriate guardrails, and establish the operational foundation that makes the broader AI governance program function.
This role requires proven experience driving complex, high-visibility projects across multiple teams both technical and business within a large organization.
________________________________________
What You'll Do
NHI Governance Platform Rollout & Operationalization
"Drive the end-to-end deployment of HTS's NHI governance platform across Hearst's environment, including integration with cloud platforms, identity providers, SaaS tools, and internal systems
"Partner with engineers and analysts on the IAM team to define and build the operational model for NHI discovery, classification, ownership assignment, and lifecycle management
"Develop dashboards, alerting, and reporting that give HTS and business stakeholders real-time visibility into machine identity posture
Machine Identity Governance
"Establish intake, assessment, and approval workflows for new machine identities and agent credentials across lines of business
"Partner with domain SMEs to define lifecycle management processes provisioning, rotation, access reviews, and decommissioning for secrets, service accounts, API keys, and OAuth tokens
"Identify ungoverned or orphaned credentials and drive remediation in collaboration with Cloud, Identity, and Engineering teams
Cross-Functional Partnership
"Serve as the operational connective tissue between Identity Management, Cloud Operations, Enterprise Applications, and the Cybersecurity team
"Partner with the Cyber team to translate policy into enforceable, automated controls
"Collaborate with the AI team and lines of business to enable governed adoption of agentic AI governance as an enabler, not a bottleneck
"Represent HTS in cross-functional forums on AI governance and machine identity strategy
Program Development
"Build and maintain runbooks, standards, and documentation for machine identity operations
"Track metrics that demonstrate risk reduction and operational maturity over time
"Stay current on the evolving NHI and agentic AI threat landscape and bring relevant practices back to HTS
________________________________________
What You Bring
"Experience in Identity and Access Management (IAM), preferably including Identity Governance and Non-Human Identity (NHI) programs
"Strong technical project management experience able to assess priority and risk, keep complex implementations on track, and proactively surface risks and ask for help rather than let issues surface late
"Solid technical grounding in modern integration technology, including APIs, cloud platforms, connectors, REST, SCIM, and enterprise system integrations
"Familiarity with OAuth, OIDC, SAML, and API key-based authentication patterns
"Business analysis experience, including the ability to gather requirements and produce technical requirements documents, design documents, and related program artifacts
"Conceptual understanding of secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager, Azure Key Vault) and/or non-human identity tooling, sufficient to work effectively with the engineers implementing product customizations
"Conceptual understanding of cloud environments (AWS, Azure, or GCP) and how machine identities are created and used within them
"Ability to work across organizational boundaries: you're as comfortable in a technical deep-dive with engineers as you are presenting risk posture to stakeholders
"Clear, structured communicator written and verbal
Nice to Have
"Experience with NHI governance or secrets security platforms (e.g., Entro Security, Astrix, Elimity, or similar)
"Background in or exposure to agentic AI frameworks and how AI agents authenticate to services
"Relevant certifications (CISSP, CCSP, cloud provider security certs)
"Experience in media, publishing, or other data-sensitive industries
________________________________________
Why This Role
oGreenfield opportunity You ll have the opportunity to help shape and develop the program from the ground up, working with key partners to establish priorities and drive progress.
oStrong organizational support This role has executive sponsorship and dedicated investment in the necessary tools, providing a clear mandate and a solid foundation for success.
oBroad, high-impact scope Machine identity governance supports AI initiatives across Hearst s portfolio of companies, offering meaningful opportunities to contribute across the organization.
oCollaborative environment You ll partner closely with experienced teams across Cloud, Identity, and Cybersecurity, working within clear areas of responsibility toward shared goals.