Lead - Security Governance and Assurance

Role overview

Responsibilities

• Own IAM strategy and roadmap across identity lifecycle, authentication, authorization, privileged access, and federation.
• Design and maintain RBAC roles, entitlements, and segregation of duties; run access reviews and recertification and evidence least privilege.
• Set PAM standards for infrastructure, applications, and endpoints; control and audit time-bound privilege and reduce standing administrator rights.
• Set and review application integration standards for SSO, SAML, OAuth, OIDC, Conditional Access, and modern authentication.
• Automate identity lifecycle and access provisioning; optimize privileged access tools and recommend evidence-based changes.
• Own security governance policies, standards, and controls mapped to ISO 27001, NIST CSF, and applicable UAE requirements.
• Lead control testing, audits, and customer security due diligence; drive findings to closure.
• Review identity and access design for new systems, cloud workloads, and acquisitions; define and report IAM metrics.
• Mentor engineers and analysts and raise identity practice across technology.
• Within six months, assess privileged, dormant, standing, and endpoint administrator access; prioritize material risks; agree target RBAC; establish evidenced reviews and integration standards.
• Within twelve months, implement RBAC and segregation of duties in priority systems, reduce standing privilege, automate lifecycle, prevent recurring audit findings, and improve capability through metrics and knowledge sharing.

What we’re looking for

• Deep hands-on enterprise IAM expertise across IGA, SSO, MFA, and PAM for infrastructure and endpoints.
• Enterprise-scale RBAC design and implementation, including role engineering, entitlement design, and operational segregation of duties.
• Strong Microsoft Entra ID capability, including Conditional Access, Privileged Identity Management, hybrid identity, and application registration.
• Experience with at least one enterprise IGA platform, such as SailPoint, Saviynt, or equivalent, including access certification and lifecycle automation.
• Security governance experience writing ISO 27001 or NIST policies and control standards and successfully completing internal and external audits.
• In-depth SAML, OAuth 2.0, and OIDC knowledge and ability to assess application integrations.
• Experience as a technical design authority or senior technical lead; able to set and defend standards and communicate access risk clearly.

Nice to have

• PAM and endpoint privilege tooling, including ManageEngine PAM360, Application Control Plus, CyberArk, BeyondTrust, or Microsoft Intune EPM.
• Identity lifecycle scripting, including PowerShell, and integration with HR systems as the identity source.
• UAE regulatory, public-sector, or regulated-customer experience; identity integration during mergers, acquisitions, or restructuring.
• Azure or AWS cloud security posture and workload identity, including service principals, managed identities, and secrets management.
• CISSP, CISM, Microsoft Identity and Access Administrator, or ISO 27001 lead auditor qualification.
• Governance of access to AI systems and data, including agent and service identity.

Working at Inception42

• Offers a diverse, inclusive culture, learning and development opportunities, and high-tech projects.
• Offers competitive remuneration, healthcare, education support, leave benefits, and other perks.