> Markdown version of [/jobs/ext/1392941-principal-identity-access-lead](https://www.wearedevelopers.com/jobs/ext/1392941-principal-identity-access-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Identity & Access Lead - **Company:** Nhbc - **Location:** Milton Keynes, UK (Remote available) - **Experience:** Expert - **Salary:** £81,000.0 - £86,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Identity and Access Management - **Published:** July 23, 2026 - **Apply:** https://www.nhbc.co.uk/careers/job-opportunities?advertid=2970 ## About the Role We're looking for an experienced Identity and Access Management leader with a strong blend of strategic, technical and stakeholder management skills., * Proven experience designing, implementing and managing enterprise IAM solutions, including identity lifecycle management, RBAC, least privilege, segregation of duties and Privileged Access Management (PAM). * Hands-on expertise with Microsoft Entra ID, SSO, MFA, Conditional Access and Identity Governance capabilities. * Strong knowledge of authentication, access governance, audit, recertification and operating effective identity controls within a regulated environment. * Experience identifying and mitigating identity risks, improving resilience and supporting incident response and recovery planning. * Good understanding of ISO 27001, NCSC guidance and PRA/FCA operational resilience requirements, with the ability to apply security and governance best practice. * Experience designing identity governance and assurance frameworks that support audit, compliance and regulatory reporting. * Strong leadership and stakeholder management skills, with experience leading or influencing cross-functional teams and engaging senior business stakeholders. * Excellent analytical, problem-solving and communication skills, with the ability to translate technical risks into clear business outcomes. ## Description Identity is at the heart of cyber security. As our Principal Identity & Access Lead, you'll play a pivotal role in protecting NHBC's systems, data and critical business services by leading the evolution of our Identity and Access Management (IAM) capability. This is an opportunity to influence enterprise-wide security strategy while remaining hands-on with modern identity technologies. Working alongside the CISO and senior stakeholders, you'll design, implement and continuously enhance IAM and Privileged Access Management (PAM) solutions that strengthen resilience, support regulatory compliance and enable secure business transformation. If you're passionate about building secure, scalable identity services and enjoy working across technology, architecture and business teams, we'd love to hear from you. What You'll Be Doing As the Principal Identity & Access Lead, you'll be responsible for shaping and delivering NHBC's enterprise IAM strategy, ensuring identity controls are secure, effective and aligned with business needs. You'll: * Partner with the CISO and senior business leaders to develop and deliver an enterprise IAM strategy aligned with regulatory expectations and industry best practice. * Define and maintain IAM policies, standards and governance frameworks in line with ISO 27001, NCSC guidance and PRA operational resilience requirements. * Lead the implementation, configuration and integration of IAM and PAM technologies across cloud, enterprise and third-party environments. * Drive improvements across the identity lifecycle, including joiners, movers and leavers, role-based access control, segregation of duties and privileged access. * Work collaboratively with HR, IT Operations, Architecture and business teams to simplify and strengthen identity processes. * Ensure access reviews, certification activities and privileged access controls remain robust, auditable and effective. * Identify identity-related risks and control weaknesses, leading remediation activities that improve security and resilience. * Oversee secure remote and supplier access, ensuring third-party connectivity is appropriately governed and monitored. * Support incident response and recovery planning for identity-related events, including break-glass access and restoration activities. * Produce meaningful reporting and assurance evidence for governance, internal audit and regulatory requirements. ## Related Videos - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Starting business without breaking the bank: Self hosted OSS productivity ecosystem](https://www.wearedevelopers.com/videos/1219-starting-business-without-breaking-the-bank-self-hosted-oss-productivity-ecosystem) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Building Well-Architected applications](https://www.wearedevelopers.com/videos/691-building-well-architected-applications) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Should Tech Managers Be Developers First? Pros and Cons](https://www.wearedevelopers.com/magazine/327-should-tech-managers-be-developers-first-pros-and-cons) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [Top HR Tech Conferences in 2024](https://www.wearedevelopers.com/magazine/303-top-hr-tech-conferences-in-2024)