Director of Identity & Access Management (IAM)

About the role

We are looking for an experienced Identity and Access Management (IAM) leader to design, build, and run a global IAM program within our Information Security organization. The role will shape strategy, modernise processes, and ensure compliance across all applications and services.

Key responsibilities

• Define and drive the enterprise IAM strategy, roadmap and governance framework.
• Build, lead and develop a high‑performing IAM team covering governance, administration and lifecycle management.
• Modernise IAM through automation, process optimisation and technology adoption.
• Establish and enforce IAM policies, standards and procedures aligned with security and regulatory requirements.
• Oversee identity lifecycle (joiner, mover, leaver) for all systems.
• Manage quarterly access certification, access reviews, least‑privilege, RBAC and SoD enforcement.
• Lead privileged access management, SSO, MFA and identity governance controls.
• Collaborate with HR, IT, application owners, Audit, Legal, Privacy and Compliance.
• Ensure IAM controls meet SOX, ISO 27001, SOC 2, GDPR, HIPAA and PCI DSS.
• Define IAM metrics, KPIs and risk indicators; drive remediation of orphaned accounts and excessive privileges.
• Evaluate and implement IAM platforms such as SailPoint, Okta, Microsoft Entra ID, CyberArk and Ping Identity.
• Provide executive reporting and manage vendor relationships.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or related field (Master’s preferred).
• 10+ years of IAM or Information Security experience, including 5+ years in leadership roles.
• Proven track record building and scaling enterprise IAM programs in large, global organisations.
• Strong knowledge of IAM governance, identity lifecycle, access certification, PAM, SSO, MFA and regulatory compliance.

Required skills

• SailPoint
• Okta
• Microsoft Entra ID
• CyberArk
• Ping Identity
• Privileged Access Management (PAM)
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Role‑Based Access Control (RBAC)
• Segregation of Duties (SoD)