Head of IAM platform/GG13

Job description

Description and Requirements Overall

The Head of Identity & Access Management (IAM) platform is accountable for the operational stability, security, governance, and resilience of the firm's IAM platforms. The role leads the regional IAM team delivering secure and reliable identity services for employees, applications, and infrastructure. The role owns the regional IAM platform’s roadmap and strategies, financial governance, risk management, and people leadership, ensuring services remain secure, compliant, highly available, aligning global standards, working closely with Global Security.

A key mandate is to strengthen and standardize IAM platform. Automate manual process to manage the identity lifecycle partnering with Global security, governance, and centralized controls. The role reduces operational risk by automating identity lifecycles, enforcing policy-driven access controls, and improving visibility across identities, credentials, certificates, APIs, and privileged access.

What’s attractive for this role

A highly visible role offering direct engagement with CTO or CIOs and Global security leadership teams, with responsibility for managing IAM infrastructure platform.

Responsibilities

Own the overall IAM platform roadmap, governance, and operational excellence for the region, partnering with Global security Lead and manage the regional IAM platform team, including hiring, performance management, coaching, succession planning, and capability development. Own the lifecycle, availability, resiliency, security, and continuous improvement of IAM infrastructure platforms, including: Ensure secure and reliable IAM services for employees, customers, partners, applications, APIs, and infrastructure across the region, including the following products; Ping Identity (SSO, MFA, Passkey) Venafi Certificate Management Identity Governance & Administration (IGA) Reverse Proxy platforms API Gateway platforms Partners with Global Security, Architecture, Infrastructure, Application Development, Risk, Audit, and Compliance teams to establish and enforce IAM standards, policies, and controls.

Drive end-to-end automation of identity lifecycle processes, including joiner, mover, leaver, access provisioning, certification, revocation, and certificate management. Ensure 24x7 operational support for critical IAM platforms, including incident management, problem management, vulnerability remediation, disaster recovery, and operational resilience. Manage annual budgets, forecasts, actuals, vendor contracts, software licensing, and financial governance while driving cost optimization opportunities.

Act as the regional subject-matter expert and trusted advisor on Identity, Authentication, Authorization, PKI, and Access Governance. Requirements (Experience, Skills, Education) 12+ years of experience in Identity & Access Management, Cybersecurity, Security Engineering, Infrastructure Security, or related disciplines. 5+ years of people leadership experience managing enterprise-scale IAM or security engineering teams.

Proven experience managing large-scale IAM platforms in highly regulated enterprise environments. Strong understanding of Identity Governance, Access Certification, Segregation of Duties, Privileged Access Controls, and Identity Risk Management. Experience driving IAM transformation, platform modernization, governance improvements, and automation initiatives. Experience managing complex vendor ecosystems, budgets, contracts, and strategic technology investments.

Strong risk management, audit, compliance, and regulatory knowledge. Executive-level communication and stakeholder management skills with the ability to influence senior business and technology leaders. Fluent in English (written and verbal) Preferable CISSP, CISM, CRISC, SABSA, or equivalent security certifications. Ping Identity certifications. Venafi certifications. Microsoft Security or Entra ID certifications. Experience implementing Zero Trust programs.

Experience with AI-enabled Security Operations and Identity Analytics. Experiencewithin Insurance, Banking, Financial Services, or other highly regulated industries. Business-level Japanese proficiency (JLPT N2 or above)