IAM Continuous Assurance Manager

Accountabilities:: Lead the design, implementation, and continuous improvement of the IAM Continuous Assurance framework, including automated control monitoring, risk analysis, exception management, validation, and reporting. Establish and assess IGA and PAM assurance controls to ensure identity governance, privileged access, and supporting processes operate effectively. Define and monitor controls covering identity lifecycle management, access requests and approvals, role-based access control, segregation of duties, privileged access, and periodic access reviews. Partner with IAM Engineering to develop repeatable testing and monitoring processes using IAM, HR, IT service management, directory, and application data. Automate control testing and evidence collection through analytics, workflow tools, and approved AI capabilities where appropriate. Act as a subject matter expert in IGA and PAM assurance, evaluating governance processes, technical controls, operational practices, exceptions, and supporting evidence. Identify inappropriate or excessive access, control failures, overdue certifications, orphan accounts, policy exceptions, and privileged access risks. Conduct root cause analysis and coordinate remediation activities with control owners, ensuring issues are resolved within agreed timelines. Develop risk-based monitoring strategies focused on critical applications, privileged identities, high-risk access, and material control exceptions. Lead and develop the IAM Assurance team by setting objectives, priorities, and performance expectations while strengthening capabilities in risk management, controls, and data-driven decision-making. Define and maintain the IAM Assurance operating model, ensuring clear accountability, appropriate independence, effective governance, and alignment with organizational frameworks. Provide technical and domain leadership in IAM governance, IGA, PAM, access controls, and relevant security standards, including ISO 27001. Collaborate with Internal Audit, Risk, Compliance, Technology, and business stakeholders to coordinate assurance activities, support audit readiness, and oversee timely remediation. Maintain IAM governance metrics and reporting, providing leadership with clear visibility into control effectiveness, emerging risks, and improvement opportunities. Requirements: Advanced English proficiency. Proven experience in IAM, security assurance, IT risk, audit, or a related discipline, including experience leading teams or programs. People management experience is strongly preferred. Experience designing, implementing, or operating Continuous Assurance, Continuous Controls Monitoring (CCM), automated compliance monitoring, or data-driven assurance programs. Strong hands-on or governance experience in Identity Governance and Administration (IGA), including joiner/mover/leaver processes, access certifications, role-based access control, privileged access, and segregation of duties. Strong knowledge of Privileged Access Management (PAM), including privileged account discovery and onboarding, credential management, access approvals, privileged session controls, least privilege principles, and reducing standing privileged access. Experience evaluating the design and operational effectiveness of IGA and PAM controls, identifying weaknesses, and translating findings into sustainable corrective actions. Familiarity with IAM platforms such as SailPoint, Okta, CyberArk, AWS, Microsoft Entra ID, or equivalent technologies. Knowledge of security and risk management frameworks such as ISO 27001, NIST, PCI DSS, and Zero Trust, with the ability to translate requirements into effective IAM controls. Experience managing assurance or audit activities, with a strong understanding of accountability, independence, constructive challenge, and remediation practices. Ability to analyze identity and access data to identify exceptions, trends, and control weaknesses. Strong communication, project management, and stakeholder management skills, including the ability to explain risks and provide constructive challenge to diverse audiences. Nice to have: Experience implementing, operating, or providing assurance over SailPoint and CyberArk environments. Familiarity with automation, analytics, workflow tools, or robotic process automation (RPA) to improve assurance processes. Knowledge of approved AI and generative AI use cases for assurance and control monitoring. Experience defining key risk indicators (KRIs), key performance indicators (KPIs), control health metrics, exception reporting, and executive IAM risk reports. Proficiency in SQL, scripting, or reporting tools. CISSP, CISM, or other relevant cybersecurity certifications. Benefits: Opportunity to lead and shape a strategic IAM Continuous Assurance function. Collaborative environment working with global security, engineering, audit, risk, and compliance teams. Opportunities to develop leadership capabilities and build a specialized assurance team. Inclusive, people-centered culture that values diversity, well-being, and professional development. Work environment that supports balance between professional responsibilities and personal interests. Recognition through workplace certifications and employer awards.