Identity & Access Management Manager Job

OVERVIEW

Job Title

Identity & Access Management Manager

Job Code

-

Grade

T1

Group

Government product

Division

Technology Division

Department

IT Infrastructure

Unit

Identity Management (AD, PAM, IAM)

ROLE PURPOSE

The aim is to state the overall significance of the job from the organization's perspective.

To lead the Identity & Access Management (IAM) function across Elm by defining and managing IAM strategy, governance, operational controls, and service delivery practices. The role is responsible for ensuring secure, compliant, and efficient identity governance, privileged access management, authentication services, access lifecycle management, automation, business continuity, disaster recovery readiness, and continuous improvement of IAM capabilities in alignment with Elm’s policies, cybersecurity requirements, and operational objectives.

KEY ACCOUNTABILITIES & ACTIVITIES

This section describes the principal outputs required from the job.

1.  IAM Strategy & Roadmap Management

• Develop and maintain the IAM strategy, roadmap, and operational plans in alignment with technology and cybersecurity objectives.
• Identify improvement opportunities across IAM, IGA, PAM, Active Directory, SSO, and MFA services.
• Define IAM priorities, initiatives, and performance objectives to enhance service maturity and operational effectiveness.
• Monitor execution of IAM plans and ensure alignment with business continuity, security, and compliance requirements.

2.  IAM Team Leadership & Capability Development

• Lead, mentor, and develop IAM team members responsible for identity governance, privileged access, Active Directory, SSO, and MFA services.
• Manage team performance, workload distribution, coaching, and capability development activities.
• Promote knowledge sharing and technical excellence across IAM operations.
• Support career development and capability building to strengthen IAM service delivery and reduce operational dependency risks.

3.  Enterprise IAM Operations Management

• Manage end-to-end IAM operations including Joiner-Mover-Leaver lifecycle, provisioning, deprovisioning, access modifications, and service requests.
• Ensure IAM services are delivered according to agreed service levels, operational standards, and business requirements.
• Oversee IAM incident, problem, and change management activities to maintain service stability.
• Ensure IAM operations support business continuity and disaster recovery readiness requirements.

4.  IAM Governance & Access Control

• Establish and maintain IAM governance frameworks, policies, standards, and control mechanisms.
• Oversee role-based access control, segregation of duties, access certification, and access review processes.
• Ensure access rights are granted, reviewed, modified, and revoked in accordance with approved policies and procedures.
• Monitor IAM compliance with internal standards and recommend corrective actions where required.

5.  Privileged Access Management

• Oversee privileged access management activities to ensure secure control of privileged identities and accounts.
• Apply least privilege and Zero Trust principles across privileged access practices.
• Monitor privileged access usage, reviews, exceptions, and remediation activities.
• Ensure privileged access controls are aligned with cybersecurity, audit, and compliance requirements.

6.  IAM Risk, Compliance & Audit Support

• Support IAM-related audits, regulatory assessments, and compliance requirements including NCA ECC, ISO 27001, and relevant internal controls.
• Identify IAM risks, control gaps, and compliance findings, and develop appropriate mitigation plans.
• Coordinate evidence collection and remediation activities related to IAM governance and access controls.
• Track IAM risk indicators and ensure timely closure of audit and compliance actions.

7.  IAM Automation, Integration & Modernization

• Lead IAM modernization initiatives to improve automation, integration, and operational efficiency.
• Automate access request workflows, provisioning, deprovisioning, certification, and approval processes where applicable.
• Coordinate IAM integrations with enterprise platforms, applications, directories, and authentication services.
• Drive continuous improvement initiatives that reduce manual effort and improve access management accuracy.

8.  Stakeholder, Vendor & Service Performance Management

• Coordinate with HR, Cybersecurity, Infrastructure, GRC, Audit, Application Owners, and Vendors to ensure effective IAM service delivery.
• Manage vendor relationships, support activities, and IAM-related service commitments.
• Monitor IAM KPIs, service performance, business expectations, and operational dashboards.
• Maintain IAM standards, policies, procedures, and operational documentation to support service consistency and governance.

9.  Policies, Processes & Procedures

• Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.

10.  Information Security

• Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.

JOB SPECIFICATIONS

Academic and professional qualifications

• Bachelor’s degree in IT, Computer Science, Cybersecurity or related field
• SailPoint, CyberArk, Microsoft Identity, CISSP, CISM or equivalent

Years and Nature of Experience

• 8–12 years in IAM/Cybersecurity/IT Operations with 3–5 years in leadership managing IAM governance, PAM and enterprise IAM programs.