Asaf KatzGTM Advisory
← All articles

How to Book Meetings With Heads of IAM (2026)

By Asaf Katz · June 3, 2026

Drafted with AI on my frameworks, stories and numbers. Judged and edited by me.

Quick answer

To book meetings with Heads of IAM in 2026, stop cold pitching and invite them to peer conversations on real identity and access problems. IAM leaders ignore vendor emails but show up for discussions on access governance, zero trust, and audit readiness. Relevance earns the meeting that persistence cannot.

To book meetings with Heads of IAM in 2026, stop cold pitching and invite them to peer conversations on real identity and access problems. Identity and access management leaders are technically deep, analytically rigorous, and completely immune to vendor pitches that do not demonstrate specific understanding of the IAM problem space. Relevance earns their attention. Generic outreach gets filtered immediately.

I learned this early. When I started selling door to door, I had no brand, no inbound, just a doorbell and an offer. The only thing that kept a door open was relevance. That principle has not changed. With IAM leaders, the bar for relevance is just higher.

Why Heads of IAM are difficult to reach with traditional outbound

The Head of IAM, also titled Identity Architect, Director of Identity Security, or VP of Access Governance depending on the organization, is a specialized technical leader who sits at the intersection of security, compliance, and infrastructure. Three characteristics make them particularly resistant to cold outbound.

Deep technical expertise. IAM leaders can evaluate vendor claims quickly and accurately. A pitch that misrepresents how identity protocols work, overstates capability, or conflates different parts of the IAM stack is immediately dismissed. Cold outreach that demonstrates technical vagueness signals that the vendor does not understand their world.

Specific, complex problems. IAM is not a generic challenge. Access governance, privileged access management, identity federation, SCIM provisioning, and zero trust network access are distinct technical domains with their own frameworks, standards bodies, and practitioner communities. An IAM leader evaluating a vendor wants evidence of deep domain understanding, not a broad security pitch.

Peer-first information sourcing. Like most technical leaders, Heads of IAM rely heavily on peer input for vendor evaluation. They participate in identity-specific communities like IDPro and the Identity Defined Security Alliance, attend conferences like Identiverse and RSAC IAM tracks, and compare notes with peers at similar organizations. Vendor outreach that bypasses this peer validation process rarely influences their shortlist.

What earns IAM leader attention in 2026

The approach that consistently reaches Heads of IAM is a peer conversation about a real identity problem they are actively working on. That can take several forms.

Identity-specific peer roundtables. A structured conversation among identity and access leaders on a current challenge: migrating to a cloud identity provider, implementing privileged access controls in a hybrid environment, preparing for DORA or NIS2 compliance requirements, or scoping a zero trust project. These conversations draw voluntary attendance from IAM leaders who are wrestling with the same challenges.

Technical practitioner panels. A session where experienced identity architects discuss their real implementation experiences, including what went wrong and what they would do differently. IAM leaders learn from this format because it is directly applicable to their work, not aspirational marketing content.

Compliance-anchored briefings. Regulatory requirements like SOC 2, ISO 27001, and sector-specific mandates drive IAM investment at many organizations. Events that connect IAM program decisions to compliance outcomes draw the leaders whose budgets are tied to those requirements.

This is also why I track the data on invite-versus-pitch outreach so closely. Across hundreds of campaigns, event invites get accepted 40 to 50 percent of the time. Pitch outreach to the same lists gets 5 to 10 percent. The list is identical. The ask is the variable. For a skeptical technical buyer like an IAM leader, that gap is even wider.

How the event-led motion works for reaching IAM leaders

The event-led motion runs in five steps.

Identify the right IAM topic. Scan what identity and access leaders are discussing in practitioner communities, conference session questions, and compliance forums. The topic comes from their actual conversations, not from your product roadmap. When I ran a webinar on AI regulation, it pulled 754 signups in 26 days with zero ad spend, because the topic was something buyers already wanted to discuss with voices they already trusted. The same logic applies here. Pick the identity problem that is already live in their heads.

Host a technically credible live event. A focused session featuring IAM practitioners discussing a real identity challenge. The content must reflect genuine technical depth. IAM leaders evaluate the credibility of a session quickly based on the specificity and accuracy of the discussion.

Invite precisely. Build the invite list around identity and access leaders at companies that match your ICP on sector, identity program maturity, and regulatory exposure. Outreach that references the specific identity problem and the peer panel earns responses that a generic security pitch cannot.

Run a peer-first session. Facilitate the conversation. Do not dominate it with vendor positioning. The IAM leader who attends your event to hear peers discuss a real problem comes away with useful insights and a positive association with your brand as the facilitator of that conversation.

Follow up with the warmest attendees. After the event you know exactly who came, who asked the most engaged questions, and who stayed until the end. Those signals identify the IAM leaders worth pursuing. Follow-up starts from the specific technical discussion they participated in, not from a generic sequence.

How to Get People to Meet You Without Pitching

What results does this produce?

At RSA Conference, a targeted campaign using this motion booked 38 C-level meetings from 1,266 prospects. One person, no booth, no brand recognition. The security leaders in that campaign included IAM and identity security executives at enterprise organizations. The approach used 12-word openers, role-matched senders (technical founder to AppSec leads, CEO to CISOs), and connection before pitch. 519 connections accepted, 161 conversations opened.

A broader event program drew 754 signups in 26 days, with more than 100 attendees from named target accounts in the security vertical, and generated $180K in pipeline. Zero ad spend.

Across recurring events targeting technical security audiences, live attendance runs from 460 to 577 attendees per event when the topic is specific and the peer roster is credible. My own live show, Risk Takers, is built on exactly this model.

Common mistakes when targeting IAM leaders

Generic security messaging. IAM leaders are not a generic security buyer. Outreach that conflates IAM with broader cybersecurity topics or treats them as interchangeable with CISOs fails to demonstrate the domain understanding that earns their respect.

Feature-led outreach. Listing capabilities without connecting them to specific IAM problems or implementation contexts tells an IAM architect very little. They want to know which specific scenarios your product handles well and which it does not. When I work with enterprise security companies on their narrative, the shift that moves deals forward is always the same: buyer problem first, product second.

Ignoring the compliance driver. Many IAM investments are compliance-driven. Outreach that ignores the regulatory context of the buying decision misses one of the primary reasons budget gets approved for identity programs.

Treating the Head of IAM as the only decision-maker. IAM investments often require CISO sign-off, infrastructure team buy-in, and sometimes CFO approval for larger programs. Demand generation that only reaches the IAM lead and ignores the broader committee stalls at the procurement stage. Map the committee before you run the program.

How to structure the first meeting

When an IAM leader agrees to a follow-up after an event, the meeting should:

The principle here is the same one I learned selling to trucking companies years ago. The most practical buyers on earth. If the value is not obvious in one sentence, the conversation is over. IAM leaders are the same. Specificity is the only currency that works.

Take the free 60-second check to see if your offer is ready.

Frequently asked questions

What IAM topics attract the most engagement?

Access governance, privileged access management, zero trust implementation, cloud identity migration, and compliance-driven identity programs (SOC 2, ISO 27001, DORA). Topics drawn from real practitioner community discussions outperform internally chosen content.

Do Heads of IAM attend peer events?

Yes, consistently. Identity leaders participate in Identiverse, RSA IAM tracks, IDPro community sessions, and peer roundtables where the topic is a real identity challenge and the room is fellow practitioners.

How is event-led outreach different from cold email to IAM leaders?

Cold email asks for their time with no demonstrated understanding of their problem. An event invitation offers peer conversation on a specific identity challenge they are actively managing. Technical specificity is what earns their response.

What results has this approach produced for security vendors?

38 C-level meetings from 1,266 prospects at RSA Conference, including identity and security leaders at enterprise organizations. Live event attendance of 460 to 577 per event in the security vertical.

How technically specific does the event content need to be?

Specific enough to demonstrate genuine domain understanding. IAM leaders evaluate session credibility quickly. A technically vague session on general security topics will not draw their voluntary attendance.

Is it done for us?

Yes. LinkedOtter runs the full event-led motion end to end, from topic selection through follow-up and meeting booking. You show up for the event and take the meetings.

Related

Is your go to market ready to scale? Find out in 60 seconds.

Take the free check