Identity and Access Control Manager

Role Overview

We are seeking a seasoned Identity and Access Control Manager to lead and optimize our enterprise Identity and Access Management (IAM) program. In this pivotal role, you will define, implement, and enforce robust IAM controls, policies, and standards to safeguard our organization’s digital assets while ensuring seamless operational delivery. You will oversee the full spectrum of IAM functions, including Identity Governance and Administration (IGA), Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Privileged Access Management (PAM), while driving continuous improvement and audit readiness. This position requires a strategic leader who can bridge technical expertise with operational excellence, ensuring that access controls are both secure and efficient.

Key Responsibilities

The Identity and Access Control Manager will be responsible for the following core duties and strategic initiatives:

• IAM Policy and Standards Leadership: Develop, maintain, and enforce enterprise-wide IAM policies, standards, and control objectives, including Just-In-Time (JIT) access, MFA, privileged access, service accounts, access reviews, Segregation of Duties (SoD), break-glass procedures, and logging/monitoring protocols. Ensure alignment with industry best practices and regulatory requirements.
• Operating Model and Governance: Establish and refine the IAM operating model, including RACI matrices, exception management, risk acceptance frameworks, and control testing methodologies. Define service expectations, SLAs, support structures, and escalation pathways to ensure consistent and reliable IAM service delivery.
• IAM Roadmap and Workflow Optimization: Drive the IAM strategic roadmap, including the design and implementation of service delivery workflows such as request catalogs, fulfillment processes, and automation initiatives. Champion continual improvement through performance metrics, feedback loops, and innovative solutions.
• Identity Lifecycle and Access Reviews: Lead the execution of identity lifecycle management and access review programs, including role/entitlement modeling (RBAC/ABAC), access certifications, remediation actions, orphaned account cleanup, and leaver processes. Ensure seamless integration with HR, ITSM, and directory systems for reliability and accuracy.
• Privileged Access Management (PAM): Govern and oversee privileged access initiatives, including onboarding standards, vault and session controls, credential rotation, break-glass testing, and lifecycle management for service and administrative accounts. Provide critical support during privileged access-related incidents and investigations.
• SSO and MFA Standardization: Standardize and oversee the onboarding and operational management of SSO and MFA solutions, including secure onboarding gates, federation stability, MFA enrollment processes, and authentication policy tuning. Collaborate closely with IT teams to ensure robust and user-friendly authentication experiences.
• Incident Response and Collaboration: Maintain comprehensive runbooks and Standard Operating Procedures (SOPs) for IAM-related incidents. Partner with the Security Operations Center (SOC) and Incident Response (IR) teams to facilitate rapid containment, revocations, investigations, and evidence capture during security events.
• Audit and Stakeholder Management: Serve as the primary IAM focal point for internal and external audits, regulatory assessments, and stakeholder engagements. Manage vendor and partner performance, ensuring adherence to contractual obligations and reporting requirements.

Qualifications and Competencies

To excel in this role, candidates must meet the following educational and professional criteria:

• Education: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a closely related field. Equivalent professional experience may be considered in lieu of formal education.
• Experience: Minimum of 4–6 years of progressive professional experience in IAM, cybersecurity, or a related discipline, with a proven track record of leading IAM initiatives in enterprise environments.
• Technical Proficiency: Deep understanding of IT and cybersecurity principles, with hands-on experience in IAM technologies such as IGA, MFA, SSO, and PAM solutions. Familiarity with identity lifecycle management, role-based access control, and audit frameworks is essential.
• Communication Skills: Exceptional written and oral communication abilities in both Arabic and English, with the capacity to articulate complex technical concepts to diverse audiences, including executives, IT teams, and non-technical stakeholders.
• Technical Tools: Proficiency in Microsoft Office Suite, particularly PowerPoint for presentations and Excel for data analysis and reporting. Additional experience with IAM-specific tools and platforms is a plus.

Why This Role Matters

The Identity and Access Control Manager plays a critical role in protecting our organization’s digital identity infrastructure while enabling secure and efficient access for employees, partners, and systems. This position offers the opportunity to shape the future of IAM within a dynamic and forward-thinking organization, driving innovation, security, and operational excellence. If you are a strategic leader with a passion for IAM and a commitment to safeguarding digital assets, we invite you to apply and make a lasting impact.