Lead - Security Governance and Assurance (Identity & Access)

About the role

Inception42, a G42 company, is looking for a Lead to own security governance and assurance, with identity and access management as the primary technical focus. The role owns the access model, policies, controls and evidence used by auditors, regulators and customers, acts as the hands-on identity design authority, guides engineers and analysts, and manages identity tooling and vendors in collaboration with Information Security, Platform Engineering, Application Support, Internal Audit, HR and system owners.

Key responsibilities

• Own the IAM strategy and roadmap, covering joiner-mover-leaver, authentication, authorisation, privileged access and federation.
• Design and maintain the role-based access control model, including roles, entitlements and segregation of duties, and keep it workable as the business changes.
• Own access governance, including periodic access reviews, entitlement recertification and evidence that least privilege is applied in practice.
• Set standards for privileged access across infrastructure, applications and endpoints, including endpoint privilege management and removal of standing local administrator rights.
• Define how applications integrate with identity (SSO, SAML, OAuth, OIDC, Conditional Access, modern authentication) and review integrations before they go live.
• Automate identity lifecycle and access provisioning, and define the security governance framework mapped to ISO 27001, NIST CSF and applicable UAE requirements.
• Lead assurance across control testing, internal and external audit and customer security due diligence, and provide security review for new systems, cloud workloads and acquisitions.
• Define and report identity metrics, mentor engineers and analysts, and within six months assess privileged and endpoint access, agree the target RBAC model and set up access reviews and integration standards.
• Within twelve months implement RBAC and segregation of duties, reduce standing privilege, automate identity lifecycle, close audit findings without recurrence and share knowledge to improve identity capability.

Required profile

• Deep, hands-on expertise in enterprise identity and access management, including IAM, SSO, MFA and privileged access management.
• Has designed and implemented an enterprise-scale RBAC model with role engineering, entitlement design and segregation of duties.
• Security governance and assurance capability, with policies and control standards written against ISO 27001 or NIST and passed through audit.
• Experience acting as a technical design authority or senior technical lead, communicating access risk clearly to engineers, auditors and business stakeholders.

Required skills

• Strong Microsoft Entra ID, including Conditional Access, Privileged Identity Management, hybrid identity and application registration.
• At least one enterprise IGA platform such as SailPoint, Saviynt or an equivalent, including access certification campaigns.
• Federation and modern authentication protocols in depth (SAML, OAuth 2.0, OIDC).
• Nice to have: PAM tooling such as ManageEngine PAM360, CyberArk, BeyondTrust or Microsoft Intune EPM; PowerShell scripting; UAE regulatory requirements and public sector experience; identity integration in M&A; Azure or AWS workload identity; certifications such as CISSP, CISM or Microsoft Identity and Access Administrator.

What we offer

• An open, diverse and inclusive culture with a global vision.
• Learning and development through structured training programs and high-tech projects.
• A competitive remuneration package with healthcare, education support and leave benefits.