Head of Access Management Control

About the role

The Head of Access Management Control will lead and govern the Access Management framework for the bank across UAE and international operations. This senior position is responsible for driving robust Identity Access Management practices, strengthening Segregation of Duties, and embedding automation to enhance controls and governance standards.

Key responsibilities

• Establish and continuously enhance the Access Management Governance Framework aligned with regulatory expectations and internal policies.
• Ensure effective implementation of Segregation of Duties (SoD) and the principle of least privilege across all systems.
• Lead periodic RCSA reviews, control testing, and assurance reporting for Access Management.
• Drive closure of audit findings, regulatory observations, and control gaps related to IAM.
• Define and enforce access lifecycle controls (joiner, mover, leaver, privileged access, periodic certification).
• Govern third‑party and managed‑service access controls with regular validation.
• Own the automation roadmap for IDAM, including workflow digitisation, straight‑through processing, automated certification, SoD checks, and role mining.
• Develop dashboards and MIS reporting (KPIs/KRIs) to provide real‑time control visibility.
• Collaborate with IT to embed preventive controls within systems and promote data‑driven decision‑making.
• Work closely with GISD and ITD to define and enhance the enterprise‑wide IAM strategy and onboard new applications.

Required profile

• Proven leadership experience in Identity Access Management or related security domains.
• Strong stakeholder engagement and regulatory compliance background, preferably in banking.
• Demonstrated ability to design and govern access control frameworks and policies.
• Experience driving automation and digital enablement initiatives.
• Familiarity with governance frameworks such as RCSA, audit, and compliance.

Required skills

• Identity Access Management (IAM/IDAM) platforms
• Segregation of Duties (SoD) implementation
• Role Mining techniques
• Automated access certification processes
• Dashboard development and MIS reporting
• Workflow digitisation and automation tools