Identity & Access Management (IAM) Manager

About the role

We are looking for an experienced Identity and Access Management (IAM) leader to design, build and run a global IAM program within our Information Security organization. The role will shape strategy, modernise processes and ensure compliance across all applications and services.

Key responsibilities

• Define and lead the enterprise IAM strategy, roadmap and governance framework.
• Build, lead and develop a high‑performing IAM team covering governance, administration and lifecycle management.
• Modernise the IAM program through automation, process optimisation and technology adoption.
• Establish and enforce IAM policies, standards and procedures aligned with security and regulatory requirements.
• Oversee identity lifecycle processes (joiner, mover, leaver) for all systems.
• Manage quarterly access certification, access reviews, least‑privilege, RBAC and segregation of duties.
• Administer privileged access management, single sign‑on, multi‑factor authentication and identity governance controls.
• Partner with HR, IT, application owners, audit, legal, privacy and compliance teams.
• Ensure IAM controls meet SOX, ISO 27001, SOC 2, GDPR, HIPAA and PCI DSS requirements.
• Define IAM metrics, KPIs and risk indicators; drive remediation of orphaned accounts and excessive privileges.
• Evaluate and implement IAM platforms such as SailPoint, Okta, Microsoft Entra ID, CyberArk and Ping Identity.
• Provide executive reporting and manage vendor relationships.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or related field (Master’s preferred).
• 10+ years of IAM or Information Security experience, including 5+ years in leadership roles.
• Proven track record building and scaling enterprise IAM programs in large, global organisations.
• Strong knowledge of IAM governance, identity lifecycle management, access certification, PAM, SSO and MFA.

Required skills

• SailPoint
• Okta
• Microsoft Entra ID
• CyberArk
• Ping Identity
• Privileged Access Management (PAM)
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Role‑Based Access Control (RBAC)
• Segregation of Duties (SoD)
• Identity governance and access certification