Identity and Access Control Manager📣 Job Ad

About Derayah Financial

Derayah Financial, a prominent financial institution based in Riyadh, Saudi Arabia, is seeking an Identity and Access Control Manager. This full-time role is crucial for enhancing and maintaining the organization's robust security framework through effective Identity and Access Management (IAM).

The Opportunity

The Identity and Access Control Manager will lead enterprise-wide IAM initiatives, covering Identity Governance and Administration (IGA), Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Privileged Access Management (PAM). This position involves defining and enforcing security controls, owning policies and standards, designing identity lifecycle processes, and ensuring audit readiness. The role also provides operational oversight and hands-on support for daily IAM delivery, access requests, provisioning, reviews, PAM, SSO/MFA onboarding, and incident support, ensuring effective operations through internal teams and service partners.

Key Responsibilities

• Define and manage IAM policies, standards, and control objectives, including Joiner-Mover-Leaver (JML), MFA, privileged access, service accounts, access reviews, Segregation of Duties (SoD), break-glass procedures, and logging/monitoring.
• Establish the IAM operating model, covering RACI matrix, exception handling, risk acceptance, and control testing, along with service expectations such as SLAs, support, and escalation procedures.
• Drive the IAM roadmap, optimize service delivery workflows through request catalog and fulfillment processes, and lead continuous improvement initiatives.
• Lead the execution of identity lifecycle and access reviews, including developing role/entitlement models (RBAC/ABAC), managing certifications, remediation, orphan/leaver cleanup, and ensuring integration reliability with HR, ITSM, and directory services.
• Govern and oversee privileged access management, including onboarding standards, vault/session controls, credential rotation, break-glass testing, service/admin account lifecycle management, and providing support for privileged-incident response.
• Standardize and oversee SSO/MFA onboarding and operations, ensuring secure onboarding gates, federation stability, MFA enrollment and support, and collaborating with IT for authentication policy tuning.
• Maintain comprehensive runbooks and Standard Operating Procedures (SOPs), and collaborate with the Security Operations Center (SOC) and Incident Response (IR) teams during incidents for rapid containment, revocations, investigations, and evidence capture.
• Act as the primary IAM focal point for audits and stakeholders, and manage vendor and partner performance and reporting.

Required Experience

Candidates for this position should possess 5 to 10 years of experience in Identity and Access Management. This includes a demonstrated ability to lead and manage complex IAM programs and technologies within an enterprise environment.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, requiring a dedicated professional to manage critical security functions within a dynamic financial environment.

Application Process

We invite qualified candidates to apply for this role and contribute to the robust security posture of Derayah Financial.