Lead Security Governance & Assurance

About the role

Lead security governance and assurance with a focus on identity and access management, owning the access model, policies, controls and audit evidence. Act as the hands‑on design authority, guiding engineers and analysts while collaborating with Information Security, Platform Engineering, Internal Audit, HR and system owners.

Key responsibilities

• Define and execute the identity and access management strategy, covering joiner‑mover‑leaver lifecycle, authentication, authorisation, privileged access and federation.
• Design and maintain a role‑based access control (RBAC) model, including role definitions, entitlement structures and segregation of duties.
• Own access governance processes such as periodic reviews, entitlement recertification and evidence of least‑privilege enforcement.
• Set standards for privileged access management across infrastructure, applications and endpoints, and optimise existing tooling.
• Define application integration standards (SSO, SAML, OAuth, OIDC, Conditional Access) and review integrations before go‑live.
• Automate identity lifecycle and provisioning to reduce manual effort and errors.
• Lead security governance framework aligned to ISO 27001, NIST CSF and UAE requirements, and drive audit and customer due‑diligence findings to closure.

Required profile

• Deep hands‑on expertise in enterprise identity and access management, including governance, SSO, MFA and privileged access management.
• Proven experience designing and operating an enterprise‑scale RBAC model with role engineering and segregation of duties.
• Strong Microsoft Entra ID knowledge (Conditional Access, Privileged Identity Management, hybrid identity).
• Practical experience with an IGA platform such as SailPoint or Saviynt.
• Ability to write and enforce policies and controls against ISO 27001 or NIST standards.

Required skills

• Identity & Access Management (IAM)
• RBAC design and implementation
• Microsoft Entra ID, Conditional Access, Privileged Identity Management
• SailPoint, Saviynt or equivalent IGA platform
• SAML, OAuth 2.0, OIDC
• PowerShell scripting and HR system integration
• Privileged access tools (e.g., ManageEngine PAM360, CyberArk, BeyondTrust, Microsoft Intune)
• Cloud security in Azure or AWS (service principals, managed identities, secrets management)

What we offer

• Open, diverse and inclusive culture with global vision.
• Learning, development and growth opportunities through structured training and high‑tech projects.
• Competitive remuneration package with healthcare, education support and leave benefits.