Job Title : Global Access Management (GAM) / IAM Lead (Remote / Onsite).
Experience : 8+ Years.
Location : Remote / On-Site (UAE).
Role Description :
The Senior Global Access Management (GAM) / IAM Lead owns the end-to-end lifecycle of access management process, tools, and operations across all enterprise systems. The role is the single accountable owner for access governance, Segregation of Duties (SoD), User Access Reviews (UARs), and the operational stability of the GAM function, ensuring access is managed securely, consistently, and in line with security, audit, and compliance requirements.
Role Purpose :
Own day-to-day access management and governance across enterprise systems. Ensure access is granted, reviewed, and removed in line with security and compliance requirements. Act as the accountable owner for access governance and operational stability.
Key Responsibilities :
1. End-to-End Lifecycle Ownership :
- Own the full GAM lifecycle across process, tools, and operations as a single accountable function.
- Process : design, document, and continuously improve access management processes (JML, requests, approvals, exceptions, recertifications).
- Tools : own the IAM/IGA/PAM toolchain configuration baselines, roadmap, upgrades, integrations, vendor and license management, and platform health.
- Operations : manage day-to-day access operations, ticket queues, SLAs, incident and problem management, and on-call/escalation for access-related issues.
- Drive automation and self-service to reduce manual effort and turnaround time.
2. Segregation of Duties (SoD) :
- Own the SoD framework, including conflict/ruleset matrices and toxic-combination definitions across in-scope applications (including ERP/finance where applicable).
- Maintain and evolve the SoD ruleset in partnership with business process owners and control owners.
- Run SoD violation detection, remediation workflows, and exception governance, including mitigating controls.
- Produce SoD reporting and KPIs for governance forums, audit, and risk committees.
3. User Access Reviews (UARs) & Certifications :
- Design and run UAR campaigns scope, frequency by risk tier, reviewer assignment, delegation, and escalation rules.
- Own the certification platform/tooling, evidence retention, and audit traceability.
- Enforce closed-loop remediation with revocation SLAs and tracking of repeat findings.
- Report on completion rates, revocation aging, and exception trends to leadership.
4. Operational Excellence & Reporting :
- Define and meet SLAs and operational KPIs for access requests, reviews, and incidents.
- Maintain dashboards covering request throughput, MTTR, UAR completion, SoD violations, and privileged access metrics.
- Drive continuous improvement through automation, process simplification, and tool optimization.
5. Other Responsibilities :
- Own access governance across IT, OT, and business applications.
- Define and maintain access standards, role models, and approval structures.
- Manage joiner, mover, and leaver processes and ensure timely execution.
- Oversee privileged access governance in alignment with PAM controls.
- Manage vendor and third-party access, including approvals, duration, and reviews.
- Handle access exceptions, emergency access, and break-glass processes.
- Support access requirements for new projects and system onboarding.
- Work closely with Security, Infrastructure, HR, application owners, and vendors.
- Support audits, security assessments, and compliance reviews.
- Track access-related risks, issues, and remediation to closure.
Audit & Compliance :
- Support internal and external audits related to access management.
- Provide audit evidence for access provisioning, privileged access, SoD violations, and access reviews.
- Track and support remediation of audit findings and management action plans related to IAM / access governance.
- Ensure access controls align with internal policies and applicable regulatory requirements.
Technical Experience (Required) :
- Hands-on experience working with IAM/IGA platforms (any major vendor).
- Hands-on experience with SoD tooling and ruleset configuration.
- Experience designing and running access certification / UAR campaigns within an IGA platform.
- Practical understanding of directory services (Active Directory/LDAP).
- Experience with access provisioning and de-provisioning workflows.
- Working knowledge of role-based access control (RBAC) and access models.
- Familiarity with privileged access integration and alignment with PAM controls.
- Ability to review and support access design for applications and infrastructure.
- Experience handling access exceptions, emergency access, and break-glass scenarios.
Technical Experience (Preferred) :
- Exposure to PAM solutions and privileged access governance.
- Experience supporting access for legacy systems, network devices, or OT environments.
- Understanding of authentication concepts (MFA, SSO, service accounts).
- Experience working with ITSM tools for access request workflows.
IAG Implementation Scope & Key Deliverables :
- Current-state assessment and target operating model for access governance, with a phased IAG delivery roadmap and milestone plan.
- IAM/IGA platform build : configuration baselines, HR/AD/ITSM/PAM integrations, and environment promotion through to go-live.
- Role model and RBAC design delivered, including role mining, approval structures, and exception handling.
- Automated joiner/mover/leaver workflows in production with SLA-bound request, approval, and revocation flows.
- SoD ruleset build-out, conflict remediation, and mitigating-controls library across in-scope applications.
- Enterprise UAR / access certification campaigns configured, piloted, and rolled out by risk tier with closed-loop remediation.
- Application onboarding pipeline established access model definition, role design, and standardized onboarding playbook.
- Operational handover to BAU : runbooks, KPI/SLA dashboards, support model, and audit-ready evidence packs.
Experience & Skills (Minimum) :
- 7 to 10 years of experience in IAM, IGA, or access management roles.
- Strong working knowledge of access governance and identity lifecycle management.
- Demonstrated experience owning end-to-end access management across process, tools, and operations.
- Hands-on experience designing and operating SoD frameworks and rulesets, including conflict remediation.
- Proven experience running UAR/certification campaigns at enterprise scale.
- Experience owning the IAM/IGA/PAM toolchain lifecycle configuration, integrations, upgrades, and vendor management.
- Experience defining and meeting operational SLAs and KPIs for an access management function.
- Hands-on experience with IAM and/or IGA platforms.
- Experience supporting audit, compliance, or regulatory requirements.
- Ability to work independently and take ownership of outcomes.
- Clear communication and stakeholder management skills.
Certifications (Preferred) :
- Industry certifications in IAM, cybersecurity, or identity governance (e.g., IAM/IGA, security fundamentals).
- Vendor certifications related to IAM or PAM platforms are a plus.
- General security certifications demonstrating governance and control understanding are beneficial.
Global Access Management Lead • Bangalore
First Choice Business Debt Solutions is dedicated to helping small businesses, particularly Construction, Trade, and Trucking companies, overcome financial hardships caused by Merchant Cash Advance... Show more
Mobileum is a leading provider of Telecom analytics solutions for roaming, core network, security, risk management, domestic and international connectivity testing, and customer intelligence.More t... Show more
As the CDP Tech Lead, you will play a pivotal role in shaping and implementing architectural designs for a complete view of our customers within the Customer Data Platform (CDP).You will be respons... Show more
About the job Scope Core responsibilities include assessing and promoting remediation for all the assets in the Infrastructure as a Service (IaaS) and Software as a Service (Saas).The candidate wil... Show more
