Lead - Security Governance and Assurance (IAM)

About the role

Inception42, a G42 company, is looking for a Lead for Security Governance and Assurance in Abu Dhabi, with identity and access management as the primary technical focus. The role owns the access model, policies, controls and evidence used by auditors, regulators and customers, and acts as the hands-on identity design authority, guiding engineers and analysts and managing identity tooling and vendors.

Key responsibilities

• Own the IAM strategy and roadmap, covering joiner-mover-leaver, authentication, authorisation, privileged access and federation.
• Design and maintain the role-based access control model, including roles, entitlements and segregation of duties.
• Own access governance: periodic access reviews, entitlement recertification and evidence that least privilege is applied.
• Set standards for privileged access management across infrastructure, applications and endpoints, and optimise existing tooling.
• Define how applications integrate with identity (SSO, SAML, OAuth, OIDC, Conditional Access) and review integrations before go-live.
• Automate identity lifecycle and access provisioning.
• Own the security governance framework mapped to ISO 27001, NIST CSF and applicable UAE requirements, and lead assurance across audits and customer due diligence.
• Provide security review for new systems, cloud workloads and acquisitions, and define and report identity metrics.
• Mentor engineers and analysts, and within six months assess privileged and endpoint access, agree the target RBAC model and set up access reviews; within twelve months implement RBAC, reduce standing privilege and automate identity lifecycle.

Required profile

• Deep, hands-on expertise in enterprise IAM, identity governance and administration, SSO, MFA and privileged access management.
• Has designed and implemented an enterprise-scale RBAC model with role engineering and segregation of duties.
• Security governance and assurance capability, with policies and control standards written against ISO 27001 or NIST and passed audit.
• Experience as a technical design authority or senior technical lead.
• Ability to communicate access risk clearly to engineers, auditors and business stakeholders.

Required skills

• Strong Microsoft Entra ID, including Conditional Access, Privileged Identity Management and hybrid identity.
• At least one enterprise IGA platform such as SailPoint or Saviynt.
• Federation protocols in depth: SAML, OAuth 2.0 and OIDC.
• Nice to have: PAM tooling (ManageEngine PAM360, CyberArk, BeyondTrust, Microsoft Intune EPM), PowerShell scripting, UAE regulatory experience, and certifications such as CISSP, CISM or Microsoft Identity and Access Administrator.

What we offer

• An open, diverse and inclusive culture focused on innovation.
• Learning and development through structured training programs and high-tech projects.
• A competitive remuneration package with healthcare, education support and leave benefits.