Lead Security Governance and Assurance

About the role

Lead the security governance and assurance function with a primary focus on identity and access management. Own the access model, policies, controls and audit evidence while guiding engineers and analysts across the organization.

Key responsibilities

• Define and execute the identity and access management strategy, covering the full joiner‑mover‑leaver lifecycle, authentication, authorisation, privileged access and federation.
• Design and maintain a role‑based access control (RBAC) model, including role definitions, entitlement structures and segregation of duties.
• Run access governance processes such as periodic reviews, certification, entitlement recertification and evidence of least‑privilege enforcement.
• Set standards for privileged access management across infrastructure, applications and endpoints, and optimise existing tooling.
• Define application integration standards (SSO, SAML, OAuth, OIDC, Conditional Access) and review integrations before production.
• Automate identity lifecycle and provisioning to reduce manual effort and errors.
• Maintain the security governance framework aligned with ISO 27001, NIST CSF and UAE regulatory requirements.
• Lead assurance activities, including control testing, internal/external audit and customer security due diligence.
• Provide security review and design authority for new systems, cloud workloads and acquisitions.
• Report identity and access metrics and mentor engineers to raise the overall practice.

Required profile

• Deep, hands‑on expertise in enterprise identity and access management, including governance, SSO, MFA and privileged access management.
• Proven experience designing and operating an enterprise‑scale RBAC model with role engineering and segregation of duties.
• Strong knowledge of Microsoft Entra ID (Conditional Access, Privileged Identity Management, hybrid identity).
• Experience with an IGA platform such as SailPoint or Saviynt, including certification campaigns and lifecycle automation.
• Ability to write and enforce security policies and standards against ISO 27001 or NIST and successfully pass audits.
• Deep understanding of modern authentication protocols (SAML, OAuth 2.0, OIDC) and ability to critically assess application integrations.

Required skills

• Microsoft Entra ID (Conditional Access, Privileged Identity Management)
• Enterprise IGA platforms (e.g., SailPoint, Saviynt)
• Privileged Access Management tools
• SAML, OAuth 2.0, OIDC
• ISO 27001 and NIST CSF compliance
• RBAC design and implementation

What we offer

• Open, diverse and inclusive culture with a global vision.
• Outstanding learning, development and growth opportunities through structured training and high‑tech projects.
• Competitive remuneration package with healthcare, education support, leave benefits and more.