The posting
Job Responsibilities:
- Design, implement, and maintain IAM control frameworks to ensure alignment with internal policies, regulatory requirements, and cybersecurity standards.
- Perform IAM control assessments and validate the design and operating effectiveness of access management controls.
- Execute control monitoring and testing activities across IAM processes, including Joiner, Mover, Leaver (JML), Privileged Access Management (PAM), and access certification.
- Identify control gaps, track exceptions, and coordinate remediation activities with relevant stakeholders.
- Assess compliance with Role-Based Access Control (RBAC), Segregation of Duties (SoD), least privilege principles, and identity lifecycle management requirements.
- Prepare IAM control metrics, risk indicators, and assurance reports for management review.
- Support internal and external audits by preparing control evidence, responding to audit requests, and tracking remediation actions.
- Maintain control documentation, evidence repositories, and ensure implementation of corrective actions.
Job Requirements:
- Minimum 3 years of experience in IAM Controls, IT Risk, IT Audit, Cybersecurity Compliance, or Technology Risk.
- Strong understanding of IAM control frameworks, access governance, and security control testing methodologies.
- Experience in assessing IAM controls related to JML processes, PAM, access certification, RBAC, and Segregation of Duties (SoD).
- Familiarity with regulatory requirements, internal audit processes, and external audit support.
- Strong analytical, documentation, and problem-solving skills with attention to detail.
- Ability to work with cross-functional teams including security, risk, compliance, and technology stakeholders.
- Experience in financial services or regulated industries is preferred.
- Relevant certifications such as CRISC, CISM, ISO 27001 Lead Auditor, CISSP, or equivalent are advantageous.



