This role involves leading the Privileged Access Management (PAM) capability within the Identity & Access Management (IAM) function. It requires providing strategic leadership, governance, and operational oversight for enterprise-wide PAM and Secrets Management services. The position is accountable for developing and executing the PAM strategy and roadmap, ensuring robust controls over privileged identities, credentials, service accounts, and non-human identities across various environments.
Responsibilities
Lead, mentor, and develop a high-performing team of PAM engineers, fostering a culture of ownership, innovation, and continuous improvement
Define, maintain, and deliver the strategic roadmap for Privileged Access Management and Secrets Management capabilities
Establish and maintain enterprise-wide governance for privileged identities, service accounts, credentials, secrets, and non-human identities
Drive the adoption of least-privilege principles, just-in-time access, privileged session management, and modern identity security controls
Partner with Technology, Information Security, Risk, Architecture, and Audit teams to ensure privileged access risks are effectively managed and mitigated
Own the lifecycle management of privileged accounts, service accounts, credentials, and secrets across infrastructure, applications, databases, and cloud platforms
Lead PAM integration initiatives with Identity Governance & Administration (IGA), cloud security, DevOps, and automation platforms
Ensure compliance with applicable regulatory, audit, and internal policy requirements through effective controls, reporting, and governance
Develop and monitor meaningful KPIs, KRIs, and operational metrics to demonstrate service performance, control effectiveness, and risk reduction
Drive automation and process optimisation to improve scalability, user experience, and operational resilience
Manage PAM-related incidents, risks, and remediation activities, ensuring timely resolution and continuous improvement
Maintain awareness of emerging threats, technologies, and industry best practices, translating these into actionable improvements to the PAM programme
Contribute to the wider Identity & Access Management and Information Security strategy, supporting broader cyber security transformation initiatives
Requirements
Bachelor's degree in Information Technology, Computer Science, Cyber Security, or a related discipline, or equivalent professional experience
8+ years' experience in Information Security, Identity & Access Management, Cyber Security, or related technology disciplines
Proven experience leading Privileged Access Management programmes within complex enterprise environments
Previous people management experience, including leading, coaching, and developing technical teams
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Hands-on experience implementing and managing PAM platforms such as CyberArk, BeyondTrust, Delinea, or equivalent solutions
Experience implementing and supporting Secrets Management solutions, including HashiCorp Vault and cloud-native technologies
Experience integrating PAM capabilities with Identity Governance platforms such as SailPoint, Saviynt, or equivalent solutions
Experience operating within regulated environments and managing audit, risk, and compliance requirements
Demonstrated experience delivering security transformation, automation, and process improvement initiatives
Deep understanding of Privileged Access Management frameworks, technologies, and industry best practices
Strong knowledge of privileged identity lifecycle management, credential vaulting, password rotation, session monitoring, and access governance
Expertise in service account, machine identity, and non-human identity management
Strong understanding of modern Identity & Access Management principles, including Zero Trust and least-privilege access models
Experience securing cloud environments across AWS, Azure, and/or GCP
Understanding of DevOps, CI/CD pipelines, infrastructure-as-code, and secrets management within cloud-native environments
Experience leveraging APIs, automation frameworks, and scripting languages such as Python and PowerShell
Strong understanding of cyber security frameworks, risk management practices, and regulatory requirements
Ability to balance technical, operational, risk, and business requirements when designing security solutions
Excellent stakeholder management and influencing skills, with the ability to engage effectively at all levels, including senior leadership
Strong analytical, problem-solving, and decision-making capabilities
