Senior Access Governance Specialist (Remote)

About the role

FUTURA-L is looking for an experienced Senior Access Governance Specialist to oversee identity and access governance processes, strengthen access controls and support compliance with security policies and regulatory requirements. The role is fully remote and focuses on digital identity governance, access certification, control monitoring, audit support and collaboration with cybersecurity, IT, risk and compliance teams.

Key responsibilities

• Develop, maintain and improve identity and access governance policies, procedures, standards and control frameworks.
• Oversee user access provisioning, modification, periodic review and deprovisioning with system owners.
• Coordinate periodic access certification campaigns and review RBAC models, supporting least-privilege and need-to-know principles.
• Monitor segregation of duties (SoD) conflicts and govern privileged accounts, service accounts and elevated permissions.
• Assess access requests, exceptions and policy deviations against approval requirements and risk criteria.
• Collaborate with application owners, HR, IT operations, cybersecurity, internal audit and compliance to keep access records accurate.
• Analyse access review results, control exceptions and audit findings, maintain audit evidence and support IGA platform implementation.
• Build dashboards and KPIs, investigate control deficiencies and prepare governance reports and audit responses.
• Guide junior specialists and stakeholders on access governance requirements.

Required profile

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems or a related field.
• Significant experience in IAM, access governance, information security, IT risk or technology compliance.
• Experience supporting internal audits, access control testing, compliance reviews and remediation tracking.
• Relevant certifications such as CISA, CISSP, CISM or identity governance vendor certifications are an advantage.

Required skills

• Strong understanding of RBAC, least-privilege, SoD, access certification and privileged access governance.
• Experience with identity governance platforms, access management tools or enterprise identity systems (e.g. Microsoft Entra ID, Active Directory, SailPoint, Saviynt).
• Knowledge of ISO 27001, NIST and COBIT where relevant.
• Strong analytical, documentation and stakeholder management skills, and excellent communication with technical and non-technical audiences.