Manager - Privileged Access Management
Role Overview
Lead the Privileged Access Management (PAM) capability within the Identity & Access Management (IAM) function, providing strategic leadership, governance, and operational oversight for enterprise-wide Privileged Access Management and Secrets Management services.
Accountable for the development and execution of the PAM strategy and roadmap, ensuring the organisation maintains robust controls over privileged identities, credentials, service accounts, and non-human identities across on-premises, cloud, and hybrid environments.
Drive the adoption of modern identity security practices, reduce cyber risk, strengthen regulatory compliance, and enhance operational efficiency through automation and continuous improvement.
Key Skills for This Role
Full Job Posting
Job Purpose:
- Lead the Privileged Access Management (PAM) capability within the Identity & Access Management (IAM) function, providing strategic leadership, governance, and operational oversight for enterprise-wide Privileged Access Management and Secrets Management services.
- Accountable for the development and execution of the PAM strategy and roadmap, ensuring the organisation maintains robust controls over privileged identities, credentials, service accounts, and non-human identities across on-premises, cloud, and hybrid environments. Drive the adoption of modern identity security practices, reduce cyber risk, strengthen regulatory compliance, and enhance operational efficiency through automation and continuous improvement.
- Lead, mentor, and develop a high-performing team of PAM engineers, fostering a culture of ownership, innovation, and continuous improvement.
- Define, maintain, and deliver the strategic roadmap for Privileged Access Management and Secrets Management capabilities.
- Establish and maintain enterprise-wide governance for privileged identities, service accounts, credentials, secrets, and non-human identities.
- Drive the adoption of least-privilege principles, just-in-time access, privileged session management, and modern identity security controls.
- Partner with Technology, Information Security, Risk, Architecture, and Audit teams to ensure privileged access risks are effectively managed and mitigated.
- Own the lifecycle management of privileged accounts, service accounts, credentials, and secrets across infrastructure, applications, databases, and cloud platforms.
- Lead PAM integration initiatives with Identity Governance & Administration (IGA), cloud security, DevOps, and automation platforms.
- Ensure compliance with applicable regulatory, audit, and internal policy requirements through effective controls, reporting, and governance.
- Develop and monitor meaningful KPIs, KRIs, and operational metrics to demonstrate service performance, control effectiveness, and risk reduction.
- Drive automation and process optimisation to improve scalability, user experience, and operational resilience.
- Manage PAM-related incidents, risks, and remediation activities, ensuring timely resolution and continuous improvement.
- Maintain awareness of emerging threats, technologies, and industry best practices, translating these into actionable improvements to the PAM programme.
- Contribute to the wider Identity & Access Management and Information Security strategy, supporting broader cyber security transformation initiatives.
- Bachelor's degree in Information Technology, Computer Science, Cyber Security, or a related discipline, or equivalent professional experience.
- 8+ years' experience in Information Security, Identity & Access Management, Cyber Security, or related technology disciplines.
- Proven experience leading Privileged Access Management programmes within complex enterprise environments.
- Previous people management experience, including leading, coaching, and developing technical teams.
- Hands-on experience implementing and managing PAM platforms such as CyberArk, BeyondTrust, Delinea, or equivalent solutions.
- Experience implementing and supporting Secrets Management solutions, including HashiCorp Vault and cloud-native technologies.
- Experience integrating PAM capabilities with Identity Governance platforms such as SailPoint, Saviynt, or equivalent solutions.
- Experience operating within regulated environments and managing audit, risk, and compliance requirements.
- Demonstrated experience delivering security transformation, automation, and process improvement initiatives.
Key Responsibilities:
- Qualifications & Experience:
Knowledge & Skills:
- Deep understanding of Privileged Access Management frameworks, technologies, and industry best practices.
- Strong knowledge of privileged identity lifecycle management, credential vaulting, password rotation, session monitoring, and access governance.
- Expertise in service account, machine identity, and non-human identity management.
- Strong understanding of modern Identity & Access Management principles, including Zero Trust and least-privilege access models.
- Experience securing cloud environments across AWS, Azure, and/or GCP.
- Understanding of DevOps, CI/CD pipelines, infrastructure-as-code, and secrets management within cloud-native environments.
- Experience leveraging APIs, automation frameworks, and scripting languages such as Python and PowerShell.
- Strong understanding of cyber security frameworks, risk management practices, and regulatory requirements.
- Ability to balance technical, operational, risk, and business requirements when designing security solutions.
- Excellent stakeholder management and influencing skills, with the ability to engage effectively at all levels, including senior leadership.
- Strong analytical, problem-solving, and decision-making capabilities.
Qualifications
- Deep understanding of Privileged Access Management frameworks, technologies, and industry best practices.
- Strong knowledge of privileged identity lifecycle management, credential vaulting, password rotation, session monitoring, and access governance.
- Expertise in service account, machine identity, and non-human identity management.
- Strong understanding of modern Identity & Access Management principles, including Zero Trust and least-privilege access models.
- Experience securing cloud environments across AWS, Azure, and/or GCP.
- Understanding of DevOps, CI/CD pipelines, infrastructure-as-code, and secrets management within cloud-native environments.
- Experience leveraging APIs, automation frameworks, and scripting languages such as Python and PowerShell.
- Strong understanding of cyber security frameworks, risk management practices, and regulatory requirements.
- Ability to balance technical, operational, risk, and business requirements when designing security solutions.
- Excellent stakeholder management and influencing skills, with the ability to engage effectively at all levels, including senior leadership.
- Strong analytical, problem-solving, and decision-making capabilities.
About RJWM
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at RJWM
Operations Administrator – Client Admin FTC
London, GBR
About the Role: As an Operations Client Administrator, you’ll be part of a high‐performing operations team responsible for ensuring clients receive a seamless, accurate and compliant service. Your work will span client o
Senior Administrator - Bank Reconciliations
Chelmsford, GBR
Advisor – Internal Audit
London, GBR
About the Role: We are looking for an Advisor to join our Internal Audit team. This is an excellent opportunity for an audit professional looking to further develop their career within a regulated financial services envi
Senior HR Business Partner (FTC)
London, GBR
About the Role: We are seeking an experienced Senior HR Business Partner to join our HR team on a 12-month fixed-term contract to provide maternity cover. This is a fantastic opportunity for a commercially focused HR pro
Assistant Implementation Portfolio Manager
London, GBR
Paraplanner
London, GBR
Operations Administrator – Client Admin FTC
London, GBR
Senior Administrator - Bank Reconciliations
Chelmsford, GBR
Advisor – Internal Audit
London, GBR
Senior HR Business Partner (FTC)
London, GBR
Senior Advisor – Internal Audit
London, GBR