Background

The Group Head: Identity & Access Management (IAM) will provide enterprise-wide leadership over identity governance, access control frameworks, authentication systems, and privileged access management across the organization’s digital and technology landscape.

Key Duties and Responsibilities

The role will define and implement the enterprise IAM strategy aligned with cybersecurity policies, regulatory requirements, and risk management frameworks. The incumbent will oversee identity lifecycle management, including provisioning, de-provisioning, role-based access control, and segregation of duties.

The position will drive implementation of identity governance solutions, multi-factor authentication frameworks, and zero-trust security principles across all business units. The role will ensure compliance with regulatory standards relating to data protection, information security, and access controls.

The Group Head will lead continuous monitoring of privileged accounts, conduct periodic access reviews, and ensure audit-readiness of IAM controls. The position will also manage vendor relationships for IAM platforms and coordinate with internal audit, risk, compliance, and IT security teams.

Additionally, the incumbent will lead a specialized IAM team, develop performance metrics, oversee incident investigations related to unauthorized access, and report security posture insights to senior leadership and board-level committees.

• Define and implement the enterprise IAM strategy aligned with cybersecurity policies, regulatory requirements, and risk management frameworks.
• Oversee identity lifecycle management, including provisioning, de-provisioning, role-based access control, and segregation of duties.
• Drive implementation of identity governance solutions, multi-factor authentication frameworks, and zero-trust security principles across all business units.
• Ensure compliance with regulatory standards relating to data protection, information security, and access controls.
• Lead continuous monitoring of privileged accounts.
• Conduct periodic access reviews.
• Ensure audit-readiness of IAM controls.
• Manage vendor relationships for IAM platforms.
• Coordinate with internal audit, risk, compliance, and IT security teams.
• Lead a specialized IAM team.
• Develop performance metrics.
• Oversee incident investigations related to unauthorized access.
• Report security posture insights to senior leadership and board-level committees.