Identity and Access Control Manager

Position Overview

We are seeking a seasoned and strategic Identity and Access Control Manager to lead our enterprise-wide Identity and Access Management (IAM) initiatives. This pivotal role will be responsible for defining, implementing, and enforcing robust IAM controls, policies, and standards to safeguard our organization’s digital assets while ensuring seamless operational delivery. The ideal candidate will possess deep expertise in Identity Governance and Administration (IGA), Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Privileged Access Management (PAM), with a proven ability to drive operational excellence, compliance, and continuous improvement across all IAM functions.

Key Responsibilities

The Identity and Access Control Manager will oversee the full spectrum of IAM operations, including policy development, lifecycle management, audit readiness, and incident response. Your core responsibilities will encompass:

• Policy and Standards Leadership: Develop, maintain, and enforce enterprise-wide IAM policies, standards, and control objectives, including Just-in-Time (JIT) access, MFA enforcement, privileged access controls, service account management, access reviews, Segregation of Duties (SoD), break-glass procedures, and logging/monitoring frameworks.
• Operating Model and Governance: Establish and refine the IAM operating model, including RACI matrices, exception management, risk acceptance protocols, and control testing methodologies. Define service expectations, SLAs, support structures, and escalation pathways to ensure high availability and reliability of IAM services.
• Strategic Roadmap and Workflow Optimization: Lead the development and execution of the IAM roadmap, including the design of service delivery workflows, request catalogs, and fulfillment processes. Drive continual improvement through automation, integration, and process optimization to enhance efficiency and user experience.
• Identity Lifecycle and Access Reviews: Oversee the end-to-end identity lifecycle, including role-based (RBAC) and attribute-based (ABAC) access models, entitlement management, certification campaigns, remediation activities, and orphan/leaver account cleanup. Ensure seamless integration with HR, ITSM, and directory systems for reliable and accurate access provisioning.
• Privileged Access Management (PAM): Govern and oversee privileged access initiatives, including onboarding standards, vault and session controls, credential rotation, break-glass testing, and lifecycle management for service and administrative accounts. Provide critical support during privileged access-related incidents and investigations.
• SSO and MFA Operations: Standardize and oversee the onboarding and operational management of SSO and MFA solutions. Implement secure onboarding gates, ensure federation stability, streamline MFA enrollment and support processes, and fine-tune authentication policies in collaboration with IT teams.
• Incident Response and Compliance: Develop and maintain comprehensive runbooks and Standard Operating Procedures (SOPs) for IAM-related incidents. Partner closely with the Security Operations Center (SOC) and Incident Response (IR) teams to facilitate rapid containment, revocations, investigations, and evidence capture during security events.
• Stakeholder and Audit Management: Serve as the primary IAM focal point for internal and external stakeholders, including auditors, regulators, and business leaders. Manage vendor and partner performance, ensuring alignment with contractual obligations and reporting requirements.

Qualifications and Competencies

To excel in this role, candidates must meet the following educational and professional requirements:

• Education: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a closely related field. Equivalent professional experience may be considered in lieu of a degree.
• Experience: Minimum of 4–6 years of progressive experience in IAM, cybersecurity, or a related discipline, with a proven track record in designing, implementing, and managing enterprise IAM solutions.
• Technical Proficiency: In-depth knowledge of IT and cybersecurity principles, with hands-on experience in IAM technologies such as IGA, MFA, SSO, and PAM. Familiarity with identity providers, directory services, and security frameworks is highly desirable.
• Communication and Collaboration: Exceptional written and verbal communication skills in both Arabic and English, with the ability to articulate complex technical concepts to diverse audiences. Strong interpersonal skills to foster collaboration across IT, security, and business teams.
• Analytical and Reporting Skills: Proficiency in Microsoft Office Suite, particularly PowerPoint and Excel, to develop compelling presentations, reports, and data-driven insights for stakeholders and leadership.

The Identity and Access Control Manager will play a critical role in shaping our organization’s security posture while enabling secure and efficient access for our workforce. If you are a strategic leader with a passion for IAM excellence and a commitment to driving operational and technological advancements, we invite you to apply and join our dynamic team.