Identity & Access Management Manager Job📣 Job Ad

About the Role

Elm Company is seeking an Identity & Access Management Manager to lead its IAM function in Riyadh. This full-time role involves defining and managing the IAM strategy, governance, operational controls, and service delivery practices across the organization. The manager will ensure secure, compliant, and efficient identity governance, privileged access management, authentication services, and access lifecycle management in alignment with Elm’s cybersecurity requirements and operational objectives.

Key Responsibilities

• Develop and maintain the IAM strategy, roadmap, and operational plans, identifying improvement opportunities across IAM, IGA, PAM, Active Directory, SSO, and MFA services.
• Manage end-to-end IAM operations, including Joiner-Mover-Leaver lifecycle, provisioning, deprovisioning, access modifications, and service requests, ensuring adherence to agreed service levels and operational standards.
• Oversee IAM incident, problem, and change management activities to maintain service stability and support business continuity and disaster recovery readiness requirements.
• Lead IAM modernization initiatives to improve automation, integration, and operational efficiency, coordinating integrations with enterprise platforms, applications, and authentication services.
• Coordinate with HR, Cybersecurity, Infrastructure, GRC, Audit, Application Owners, and Vendors to ensure effective IAM service delivery and manage vendor relationships.
• Monitor IAM KPIs, service performance, business expectations, and operational dashboards, maintaining IAM standards, policies, procedures, and operational documentation.

IAM Governance and Compliance

• Establish and maintain IAM governance frameworks, policies, standards, and control mechanisms.
• Oversee role-based access control, segregation of duties, access certification, and access review processes, ensuring access rights are managed in accordance with approved policies and procedures.
• Monitor IAM compliance with internal standards and recommend corrective actions where required.
• Oversee privileged access management activities, applying least privilege and Zero Trust principles, and monitoring privileged access usage, reviews, exceptions, and remediation.
• Support IAM-related audits, regulatory assessments, and compliance requirements, including NCA ECC, ISO 27001, and relevant internal controls.
• Identify IAM risks, control gaps, and compliance findings, developing appropriate mitigation plans and tracking timely closure of audit and compliance actions.

Team Leadership and Development

• Lead, mentor, and develop IAM team members responsible for identity governance, privileged access, Active Directory, SSO, and MFA services.
• Manage team performance, workload distribution, coaching, and capability development activities.
• Promote knowledge sharing and technical excellence across IAM operations, supporting career development to strengthen service delivery and reduce operational dependency risks.

Qualifications and Experience

• Academic and Professional Qualifications:
  • Bachelor’s degree in IT, Computer Science, Cybersecurity, or a related field.
  • Certifications such as SailPoint, CyberArk, Microsoft Identity, CISSP, CISM, or equivalent.
• Years and Nature of Experience:
  • 8–12 years of experience in IAM, Cybersecurity, or IT Operations.
  • 3–5 years in a leadership role managing IAM governance, Privileged Access Management (PAM), and enterprise IAM programs.

Work Environment

This full-time position is based in Riyadh. The role requires adherence to all relevant departmental policies, processes, standard operating procedures, and instructions to ensure work is carried out in a controlled and consistent manner. Compliance with all relevant safety, quality, environmental, and information security practices and standards is essential to ensure a healthy, safe, and secure work environment, maintaining data integrity and confidentiality.