Head of Identity and Access Management (IAM)

• Represent IAM at executive risk and governance forums, and provide clear reporting on IAM risk and control status to senior leadership
• Act as the senior point of contact for external auditors, managing engagement from evidence requests through to closing actions
• Lead IAM’s contribution to the control improvement programme, making sure commitments are delivered and evidenced
• Own IAM policies, standards and controls, and ensure they meet regulatory and audit expectations
• Set the multi-year IAM strategy, operating model and maturity roadmap
• Oversee the identity lifecycle and access reviews, authentication standards (SSO, MFA), RBAC modernisation, the PAM model and workload identity
• Lead and develop the IAM team, including any restructuring needed

• Experience leading IAM in a heavily regulated environment with high levels of audit and risk scrutiny
• Confident facing off to external auditors and representing a function at executive risk and governance forums
• Experience with C-suite stakeholders, including explaining technical risk to non-technical senior audiences
• Background in programmes with board-level visibility
• Experience of operating model updates, maturity work and team leadership
• Strong understanding of identity architectures, SSO, MFA and PAM models, plus Microsoft Entra ID and Active Directory
• Knowledge of DORA, ISO 27001 and NIST, and how they translate into IAM control requirements

Desirable: One Identity or CyberArk experience. A strong grasp of core IAM concepts matters more than specific tooling.

One of the UK’s largest investment platforms is looking for an experienced Identity & Access Management leader on a contract basis. Reporting directly to the CISO, the Senior Manager will be accountable for IAM across the business and will be its senior representative with C-suite stakeholders and external auditors.

Identity controls form a significant part of a wider control improvement programme that is followed closely at board level, and IAM is under ongoing external audit scrutiny. The role has been set at Senior Manager level to reflect this. Alongside the governance side, the successful candidate will lead the IAM team and own the function’s operating model and strategy over the coming years.

The remit covers colleague identity (people logging on to systems) and workload identity (systems communicating with each other), across the identity lifecycle, authentication, authorisation, privileged access management (PAM) and governance. Microsoft Entra ID is the main identity platform, alongside Active Directory.