Manager - Identity & Access Management (IAM)

About the role

Raqami Bank is looking for a Manager - Identity & Access Management (IAM) in its Information Security department. The role leads and governs user access administration, access reviews and privileged access management across banking applications, infrastructure, databases and cloud platforms, keeping access rights appropriate, controlled and auditable while meeting SBP, ISO/IEC 27001, PCI DSS and internal security policy requirements.

Key responsibilities

• Manage user access administration and periodic access reviews across banking applications, infrastructure, databases and cloud platforms.
• Ensure user provisioning, modification and de-provisioning (joiner-mover-leaver) follow approved processes and timelines.
• Review privileged, service, dormant, orphaned and third-party accounts.
• Ensure compliance with RBAC, least privilege and segregation of duties (SoD).
• Oversee PAM controls, including privileged account onboarding, access approvals and activity monitoring.
• Coordinate with IT, HR, business departments and system owners to fix access control issues, and maintain access matrices, evidence and remediation trackers.
• Prepare access review reports, escalate overdue actions and gaps, and support audits and regulatory assessments.

Required profile

• Bachelor's degree in Computer Science, IT, Cybersecurity or a related field; a Master's degree preferred.
• Minimum 5 years of relevant experience in IAM, access governance or information security, including hands-on work with access reviews, RBAC, PAM, SoD and joiner-mover-leaver processes.
• Strong stakeholder coordination, communication, analytical and problem-solving skills.

Required skills

• IAM platforms: Microsoft Entra ID (Azure AD), Okta Workforce Identity Cloud, Ping Identity, AWS IAM / IAM Identity Center.
• PAM: privileged account onboarding, access control, credential management, session monitoring and periodic privileged access reviews.
• Working knowledge of SBP requirements, ISO/IEC 27001, PCI DSS and internal security policies, with audit support experience.