Governance, Risk & Assurance

• Strengthen IAM governance frameworks and associated control processes.
• Support access reviews, access recertification, role modelling, and audit activities.
• Maintain appropriate evidence to demonstrate the effectiveness of identity controls.
• Support the management of privileged access, including privileged-account lifecycle processes and elevated-access workflows.
• Monitor identity-related security events, exceptions, and control failures.
• Investigate access-related issues and escalate material risks through the appropriate incident, governance, and assurance channels.

Architecture & Technical Collaboration

• Work closely with Engineering, Architecture, Infrastructure, and Application teams to ensure identity security is considered within new technology and solution designs.
• Contribute to secure identity patterns and standards across applications, cloud platforms, integrations, and enterprise services.
• Provide technical input into architecture decisions and technology initiatives where identity and access are key considerations.
• Help ensure identity controls remain scalable and appropriate as the wider technology environment develops.

Documentation & Stakeholder Engagement

• Produce and maintain technical documentation, IAM standards, guidance, and operational procedures.
• Work alongside internal teams, external delivery partners, and managed service providers to implement improvements and maintain effective IAM services.
• Provide specialist advice to both technical and non-technical stakeholders.
• Translate identity risks, security considerations, and technical options into clear recommendations that can support informed decision-making.
• Build effective relationships across multiple areas of the organisation while constructively challenging existing approaches where appropriate.

What We're Looking For

The core requirement is strong technical expertise in either Identity & Access Management or Privileged Access Management, together with the interest and capability to develop broader experience across the identity-security landscape.

You do not need to have equal experience across both IAM and PAM. The organisation would consider an experienced IAM professional looking to broaden their PAM knowledge, or an established PAM specialist seeking greater exposure to IAM design, governance, and lifecycle management.

You are likely to have:

• Strong hands-on experience designing, implementing, or materially improving IAM or PAM capabilities within an enterprise environment.
• Experience establishing IAM services, transforming existing identity environments, or helping less mature capabilities progress towards a defined target state.
• Strong knowledge of identity lifecycle management, particularly joiner, mover, and leaver processes.
• Experience managing standard user, privileged, and service identities across both cloud and on-premise environments.
• Practical experience with cloud-based identity services – cloud experience is essential.
• Knowledge of Active Directory, Microsoft Entra ID/Azure AD, or a comparable enterprise identity platform.
• A solid understanding of authentication, authorisation, RBAC, least privilege, access governance, and segregation of duties.
• Experience converting security policies, risk requirements, and compliance obligations into practical technical controls.
• Experience collaborating with Engineering and Architecture teams to influence and improve secure solution design.
• Exposure to access reviews, recertification, privileged access controls, audit evidence, and/or wider identity governance activities.
• The ability to investigate complex identity and access problems, assess available options, and implement appropriate solutions.
• Strong communication and stakeholder-management capability, with the confidence to question established practices and influence outcomes.
• A proactive approach, with a clear focus on ownership and continuous improvement.

Desirable Background & Additional Experience

Experience within a manufacturing, engineering, regulated, safety-critical, or similarly complex enterprise environment would be advantageous, although experience in these sectors is not essential.

Additional experience that would be beneficial includes:

• Privileged Access Management technologies, privileged-session controls, and elevated-access workflows.
• Integrating IAM solutions with enterprise applications, SaaS platforms, APIs, and cloud services.
• Identity Governance and Administration, including role modelling, access certification, and policy-driven access controls.
• Security architecture, cloud security, or enterprise technology strategy and roadmapping.
• Identity-focused incident response, security assurance, or audit.
• Automating IAM workflows, identity lifecycle processes, and access-request activities.
• Working with third-party suppliers, system integrators, and managed service providers.
• Relevant professional certifications within identity, cyber security, cloud security, or associated technologies.
• A degree or equivalent qualification in Information Technology, Computer Science, Cybersecurity, or a related subject.

The Person

You will bring strong technical capability, a structured and analytical approach to problem-solving, and the confidence to operate effectively across different teams and levels of an organisation. You will be comfortable balancing robust security requirements with the need to provide users with an efficient, straightforward, and effective access experience.

A strong continuous-improvement mindset will be important. You should naturally look for ways to automate repetitive tasks, strengthen existing controls, improve processes and documentation, and increase the resilience of identity services.

Above all, you will be someone who takes ownership, communicates clearly, and is comfortable dealing with complex, sensitive, or high-impact identity and access matters.