Job Search

We are seeking a Senior IAM Governance Analyst to support the development, implementation and continuous improvement of identity and access management governance across a complex organisation. This is an opportunity to play a key role in strengthening access controls, reducing risk and ensuring that identity-related processes align with regulatory obligations, internal policies and recognised industry standards.

You will establish and maintain governance frameworks covering user access, privileged access, joiner, mover and leaver processes, access reviews, segregation of duties and exception management. Working closely with information security, technology, risk, audit and business stakeholders, you will provide constructive challenge and ensure that access is granted appropriately, reviewed regularly and removed promptly when no longer required.

Key responsibilities will include overseeing periodic access certification campaigns, analysing findings and escalating control weaknesses; maintaining IAM policies, standards, procedures and control documentation; supporting audit and regulatory enquiries; monitoring key risk indicators and management information; and identifying opportunities to improve process efficiency through automation and enhanced data quality. You will also contribute to the assessment of new systems and services, ensuring that appropriate identity governance requirements are embedded from the outset.

The successful candidate will have substantial experience in IAM governance, access management, information security controls, technology risk or a related discipline. You will be confident interpreting policies and regulatory requirements, assessing control effectiveness and presenting clear recommendations to both technical and non-technical audiences. Experience with access governance platforms, privileged access management, role-based access control and identity lifecycle processes is highly desirable.

Strong analytical, organisational and stakeholder management skills are essential, alongside excellent written and verbal communication. You should be comfortable working independently, managing competing priorities and influencing colleagues at different levels. Relevant qualifications in information security, audit, risk or identity management, together with experience of frameworks such as ISO 27001, NIST or COBIT, would be advantageous.

This role offers the chance to make a visible contribution to a mature and evolving security environment while helping to improve governance, accountability and operational resilience.

We are seeking a Senior IAM Governance Analyst to support the effective management, oversight and continuous improvement of identity and access management controls across a complex technology environment. This role will help ensure that access to systems, applications and data is appropriately authorised, regularly reviewed and aligned with business, security and regulatory requirements. You will work closely with information security, technology, risk, audit and business stakeholders to strengthen governance and promote consistent access management practices.

Key responsibilities will include developing and maintaining IAM policies, standards, procedures and control frameworks; coordinating periodic access reviews, user recertification and segregation-of-duties assessments; monitoring privileged and high-risk access; and investigating control exceptions, remediation actions and potential policy breaches. You will support internal and external audits by preparing evidence, responding to queries and tracking findings through to completion. The role will also involve producing management information and risk reporting, identifying opportunities for process improvement, contributing to IAM projects and helping embed governance requirements across new and existing platforms.

To be successful, you will have substantial experience in IAM governance, access control, IT risk, compliance or a closely related discipline, ideally within a large or regulated environment. You should understand identity lifecycle management, role-based access control, privileged access, access certification and segregation-of-duties principles. Experience with IAM tools, governance platforms, audit processes and control testing is desirable, alongside the ability to interpret policies and translate them into practical operational requirements. Strong analytical, organisational and communication skills are essential, as is the confidence to challenge constructively and influence stakeholders at all levels. Relevant qualifications in information security, audit, risk or governance, such as CISA, CISSP, CRISC or an equivalent, would be advantageous.