The posting
GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.
Technology Group The Technology Group (TG) is a key enabler to keep our business moving forward and is constantly exploiting state-of-the-art information technologies to enhance GIC’s ability to be the leading global long-term investment firm. We aim to provide users with empowering and transformational capabilities, and to create an inclusive, innovative and integrated work environment.
Infrastructure Cybersecurity & Resilience (ICR)
Our mission is to fortify GIC's infrastructure and cybersecurity capabilities by embedding security and resilience into everything we do, providing stable, secure and dependable services and solutions.The individual will be part of the Cybersecurity Assurance & Defence (CSAD) team and will play a key role in strengthening the firm’s security posture through proactive vulnerability management, adversarial attack simulation planning, and continuous improvement of security. The individual will serve as a control owner, driving threat prioritization, root cause analysis, and cross-team collaboration to remediate and prevent recurrence of vulnerabilities.
What impact can you make in this role?
The IAM SVP/VP is responsible for the transforming and managing end-to-end identity governance and administration (IGA) function, driving joiner-mover-leaver (JML) processes, access recertification, role and entitlement management, and identity lifecycle management across the organization, while acting as a consulted partner to the Identity Threat Detection and Response (ITDR) function.
What will you do as VP/SVP, Identity & Access Management (IAM), Technology Group?
Identity Lifecycle Management (JML):
- Own and continuously improve the joiner-mover-leaver (JML) lifecycle process across systems, ensuring timely and accurate provisioning, transfers, and de-provisioning of identities in line with HR and business events.
- Maintain and govern the identity lifecycle framework across on-premises, cloud, and hybrid environments (AD, AWS, Azure, Linux, Windows, databases, etc.).
- Extend identity lifecycle governance to AI and other non-human identities — including AI agents, bots, service accounts, and machine-to-machine credentials — ensuring each is registered in the identity inventory, mapped to an accountable human owner, provisioned with scoped and time-bound entitlements, and de-provisioned promptly when the agent, model, or use case is retired
.
Access Recertification:
- Design, execute, and track periodic access recertification campaigns, ensuring managers/system owners complete reviews on time.
- Monitor and drive closure of remediation actions arising from recertification (e.g., access revocation, entitlement clean-up).
Role and Entitlement Management:
- Manage role and entitlement structures, including role design, role mining/engineering, and periodic entitlement clean-up to maintain least-privilege alignment.
- Govern entitlements for AI platforms and agentic tooling — covering human access to AI development, model, and copilot platforms as well as permissions delegated to AI agents on a human's behalf — applying least-privilege, approval, and recertification standards equivalent to those for human access.
- Track Segregation of Duties (SoD) conflicts and other IAM compliance matters, escalating and resolving as needed.
Identity Threat Detection and Response (ITDR) Partnership:
- Act as a consulted partner to the ITDR team, reviewing identity-related alerts and threat indicators, and advising on root cause from an IGA/access perspective.
- Coordinate remediation actions with ITDR (e.g., access suspension, credential reset, entitlement correction) arising from identity threat incidents.
Governance, Audit Assurance and Compliance:
- Manage internal and external audits (including regulatory and internal audit reviews) on IGA-related areas, including preparation of evidence, discussing issues raised and setting agreed remediation plans.
- Document and communicate IAM policies, standards, and procedures to stakeholders across the organization.
Automation and Reporting:
- Identify and drive process automation opportunities (e.g., automated recertification workflows, self-service access requests) to improve IAM operational efficiency.
- Monitor and report on IAM KPIs/KRIs (e.g., recertification completion rates, orphaned accounts, dormant access, SoD violations) to stakeholders and management.
Incident Response:
- Participate in cyber incident response activities related to identities, certificates, including compromised or expired certificates, and take appropriate corrective action.
- Collaborate with the cyber incident response team to address security breaches involving digital certificates.
What qualifications or skills should you possess in this role?
- Degree in Computer Science, Information Technology or in other related field of study.
- Minimum 7-9 years of Cyber Security experience with at least 3 years in Identity and Access Management, with hands-on exposure to IGA processes (JML, recertification, role/entitlement management).
- Familiar with managing internal and external audit engagements is a must.
- Familiarity with Identity Threat Detection concepts and experience collaborating with security operations/threat detection teams on identity-related incidents is highly desirable.
- CISSP, CIAM or similar professional certifications will be advantageous.
- Must understand or have knowledge of "Least Privileged" access management methodology.
- Knowledge and exposure in the following areas are essential:Microsoft Active Directory, databases and UNIXAmazon Web Services and Microsoft AzurePrivileged access management.Managing AI identities
- Experience with IGA tooling (e.g., SailPoint, Saviynt, or similar) preferred.
- Ability to develop SQL scripts to retrieve data for BAU work.
- Ability to effectively communicate with technical and executive audiences, both oral and written is required.
- Experience in financial services industry is preferred.
Work at the Point of Impact We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.
Flexibility at GIC At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.
GIC is an equal opportunity employer As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.
Learn more about our Technology Group here: https://gic.careers/group/technology-group/
You can apply directly through our recruitment portal at:
https://careers.gic.com.sg/job-invite/17421/
