Identity & Access Management Lead

About the role

Our client, a leading financial institution, is seeking an experienced Identity & Access Management (IAM) expert to support its cybersecurity strategy and oversee enterprise‑wide identity governance, access control, authentication, authorization, and IAM operations. The role will partner closely with Information Security, IT Operations, business stakeholders, and external vendors to develop, implement, and maintain IAM processes, controls, and technologies aligned with regulatory and security requirements.

Key responsibilities

• Develop, implement, and maintain IAM policies, standards, and procedures.
• Manage user provisioning, deprovisioning, and access‑lifecycle processes.
• Administer identity stores, authentication systems, authorization platforms, and directory services.
• Resolve identity conflicts, duplicate accounts, and access‑governance issues.
• Integrate new applications and platforms into the enterprise IAM framework.
• Own and manage Single Sign‑On (SSO), federation, authentication, and authorization solutions.
• Monitor and audit user access to ensure compliance with internal policies and regulatory requirements.
• Investigate access‑related security incidents and support remediation activities.
• Collaborate with cross‑functional teams to embed IAM controls into broader cybersecurity initiatives.
• Continuously evaluate emerging technologies and best practices to enhance IAM maturity.

Required profile

• Bachelor’s or Master’s degree in Information Security, IT, Business Management or a related discipline.
• 10‑15 years of Information Security experience, including at least 6 years in progressively responsible IAM roles.
• Proven experience managing enterprise IAM environments and identity‑governance initiatives.
• Strong analytical, problem‑solving and stakeholder‑management capabilities.
• Excellent communication and interpersonal skills with the ability to influence senior leadership.

Required skills

• Active Directory and identity‑governance platforms.
• Sailpoint IAM (preferred).
• BeyondTrust PAM, Delinea or CyberArk for privileged‑access management.
• Single Sign‑On (SSO) and federation technologies.
• Authentication and authorization frameworks.
• Account provisioning and deprovisioning processes.
• Access reviews and compliance monitoring.