Identity & Access Manager

Role Purpose

This role is responsible for the design, implementation, and ongoing management of the organisation’s Identity and Access Management (IAM) capabilities. The role ensures secure, efficient, and compliant access to systems, applications, and data across the enterprise. Working within the Security Engineering function, the role leads the delivery and continuous improvement of IAM technologies, processes, and governance practices. The role works closely with infrastructure, service management, and HR to strengthen identity security, reduce access-related risk, and support a zero trust security posture.

Key Accountabilities

• Develop and maintain the IAM roadmap and relevant documentation aligned with information and cyber security and technology strategy.
• Design and implement scalable identity and access solutions across cloud and on-prem environments.
• Lead the deployment and optimisation of core IAM capabilities, including identity lifecycle management, authentication, authorisation, and access governance.
• Support security engineering initiatives such as Zero trust, and secure modern workplace enablement.
• Oversee user provisioning, deprovisioning, role-based access control, and privileged access processes.
• Manage identity lifecycle processes in collaboration with IT service management, infrastructure, and HR teams. o Lead implementation and operation of Privileged Access Management (PAM) controls.
• Implement strong authentication mechanisms and ensure IAM is integrated into enterprise platforms.
• Ensure IAM controls meet regulatory and audit requirements, ensuring all internal and external audits are supported.
• Work closely with application and service managers, architects, and delivery teams to embed IAM into solution design.

Qualifications, Experience, Knowledge & Skills

• Bachelor’s degree in Information Security, Cyber, Information Technology or related field, relevant certifications preferred.
• Strong experience in Identity & Access Management within large complex environments
• Hands-on experience with IAM platforms
• Experience implementing PAM, role-based access, SSO, MFA, and identity lifecycle management
• Knowledge of cloud security and hybrid identity architectures.
• Ability to balance security controls with business usability.