Laing O'Rourke
Cyber Security Identity & Access Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Shape a trusted, enterprise-wide identity and access capability that protects critical systems while enabling people to work securely and effectively.
Laing O'Rourke's IT function has renewed its strategy to support the company's ambition to transform the construction industry, making it more sustainable, more productive, and fit for the future.
Technology has a critical role to play in achieving this ambition. Our focus is on applying digital capability in ways that genuinely matter, shaping how complex projects are delivered, how decisions are made, and how innovation improves outcomes for people, communities, and the environment.
Our mission is clear: to create a modern and resilient technology environment where trusted data informs every decision, AI enhances every process, and digital capability enables the organisation to operate with greater scale and productivity.
To deliver this, we are building a different kind of IT function, one that is trusted by the business, forward looking in its thinking, and deeply connected to operational outcomes. We are looking for individuals who are curious, thoughtful, and motivated by contributing to work that has real industry impact.
Role Overview
As Cyber Security Identity & Access Manager, you will be responsible for developing and leading our Identity and Access Management (IAM) capability. You will ensure that the right people have access to the right resources at the right time, balancing effective security controls with an efficient user experience. Working across cyber security, IT, business teams and external partners, you will support the delivery of our zero trust security strategy, regulatory obligations and digital transformation initiatives.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
- Define and evolve the IAM strategy, roadmap and operating model to meet current and future business needs.
- Develop IAM frameworks, policies and standards that support compliance with ISO 27001, Cyber Essentials Plus, Essential Eight and related requirements.
- Guide identity lifecycle management processes, including Joiners, Movers and Leavers, ensuring effective provisioning, modification and removal of access.
- Establish governance for authentication, authorisation and access control, including role-based and attribute-based access models.
- Identify automation and continuous improvement opportunities across IAM processes and technologies.
- Ensure IAM controls align with business risk requirements, cyber security policies and regulatory obligations.
- Collaborate with technology and business stakeholders to deliver secure, reliable and compliant identity solutions.
Essential Requirements
- Proven experience designing, implementing and managing enterprise-scale IAM programmes.
- Strong knowledge of Identity Governance and Administration (IGA), Role-Based Access Control (RBAC) and Privileged Access Management (PAM).
- Experience implementing and managing Joiner, Mover and Leaver processes and access certification reviews.
- Expertise in authentication technologies, including Single Sign-On (SSO), Multi-Factor Authentication (MFA) and passwordless authentication.
- Effective stakeholder engagement skills, with the ability to communicate technical and compliance concepts clearly and practically.
- Ability to take accountability, work collaboratively and deliver measurable outcomes.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Requirements
- Professional certifications such as CISSP or CISM.
- Experience implementing IAM platforms such as SailPoint, Entra ID, Okta or CyberArk across cloud and on-premises environments.
- Experience working within large, complex and multidisciplinary organisations.
What Makes This Role Compelling
This is a key role in the evolution of Laing O'Rourke's cyber security capability. You will have the opportunity to build and shape IAM practices, influence strategic security decisions, and deliver solutions that protect the organisation while enabling business performance. Your work will directly support modern security approaches, digital transformation and the delivery of trusted technology services across the business.
About Laing O'Rourke
Laing O'Rourke is an international engineering and construction business known for pushing boundaries in digital engineering, modern methods of construction and sustainable delivery. With more than 150 years of heritage, we are committed to creating environments in which diverse teams can excel and thrive.
Accessibility & Inclusion
We are proud to be part of the Disability Confident scheme. If you meet the essential criteria and would like to be considered through our Offer an Interview scheme, please let us know. We're also happy to provide reasonable adjustments throughout the recruitment process.
If you require an alternative format of this advert or need support during the application, please contact: resourcingteam@laingorourke.com
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London