IAM Governance Architect - #2066206

Description

• This role is based within Group Technology Cybersecurity Identity Access Management Controls Framework Audit Risk Assurance CARA It is responsible for designing and maintaining the controls and procedures that govern how staff authenticate across systems and services As the control framework owner the role is accountable for ensuring IAM controls are fit for purpose appropriately mitigate identified risks and meet relevant regulatory and compliance requirements The role owns and maintains the strategic roadmap for the control framework design ensuring it adapts to business needs and emerging threats while remaining futureproof and aligned with the banks strategy
• Key Responsibilities
• Owns the design and ongoing maintenance of the authentication control framework including mandatory procedures operating instructions and supporting metrics
• Owns and maintain the strategic control framework design roadmap driving continuous enhancement in line with business needs emerging threats and regulatory expectations
• Owns control effectiveness assessments rationales and oversight of the path to effective plans actions milestones and tracking to remediate gaps and sustain performance
• Provides firstline governance and support for audit regulatory and control testing engagements acting as the initial contact for queries and coordinating inputs from Control Operators Ensure the control framework is represented accurately responses are timely and complete and all audit or regulatory actions are tracked to closure in line with client control standards
• Collaborates with technology teams to align strategic maturity uplift priorities and oversee remediation delivery to address gaps effectively and improve control maturity
• Acts as a trusted subject matter expert providing consultancy and guidance on control framework queries from stakeholders across all Three lined of Defence GCIO and Global functions
• Provides oversight of control metrics ensuring they are monitored and reported clearly to Cybersecurity management and other relevant stakeholders to support informed decisionmaking and continuous improvement
• Supports control operators with issue resolution and lead the design and operation of exceptions including risk acceptances ensuring decisions are controlled documented and risk informed
• Work in conjunction with the other IAM CARA team members to review and streamline a global best in class process and procedure to enhance operational efficiency
• Participate in relevant controls governance committees and work closely with internal stakeholders across the business to ensure alignment on key initiatives
• Leads a highperforming team and supports emerging talent
• Experience
• Proven experience designing and monitoring the effectiveness of authentication controls across a large complex technology environment
• Solid understanding of Enterprise risk and control frameworks is essential
• Experience of working in a globally diverse team with responsibility for both delivery and their development
• Experience in creating and executing operational processes and procedures is essential
• Experience in business and IT analysis in remediation programs is essential
• Experience working with stakeholders across all levels
• Experience managing audit and risk relationships
• Experience of making timely and rational decisions based on relevant information and experience
• Strong analytical technical and problemsolving skills
• Strong presentation and reporting skills
• Experience of working in an Identity and Access Management function is preferable
• Role relevant qualifications ie CISACISSPCISMCRISC is desirable but not essential
• In addition to the details listed above the ideal candidate will demonstrate
• A desire to find ways to continually improve the service delivered to customers
• A flexible and adaptable approach to change and will support others to respond in a similar way
• Strong written and verbal communication skills with experience of adapting style and approach to the targeted audience
• Worked collaboratively with other colleagues supporting them when possible
• Ability to work in a diverse global environment with a positive goalorientated approach
• Selfsufficient and strong motivation within the context of the role and scope
• Confident to work independently and take responsibility for own progress and development
• Adept at multitasking and prioritizing highvolume workloads to ensure consistent delivery

Skills

Mandatory Skills : Administration and Access Management, Cybersecurity & AI Laws, Regulatory & Compliance - Process Quality Assurance, Risk Management (Credit/Market/IT/Ops), Stakeholder Management