Manager of Identity & Access Governance (IAM/PAM)

Galderma is a dermatology category leader present in approximately 90 countries, offering a science-based portfolio of premium brands in injectable aesthetics, dermatological skincare, and therapeutic dermatology. The company focuses on skin health, serving consumers and healthcare professionals globally. The role is based in Kraków, Poland within the IT – Cyber Security department.

• Higher education in Information Technology, Information Security or equivalent experience
• Minimum 10 years of experience in IT security, with at least 5 years in Identity & Access Management and/or Privileged Access Management
• Proven experience leading teams and managing vendors, integrators or managed services
• Strong technical understanding of Saviynt and CyberArk (PAM and CyberArk Identity/SIA) or equivalent leading IGA/PAM technologies
• Experience operating identity controls in regulated environments (e.g. SOX/ITGC; GxP exposure is an advantage), including audit support
• Understanding of machine identity and secrets management; familiarity with identity governance for AI agents and emerging frameworks (EU AI Act, NIST AI RMF) is an advantage
• Exposure to identity in OT/manufacturing environments is an advantage
• Ability to translate complex identity risk topics into business and executive language
• Professional certifications such as CISSP, CISM, or CISA strongly preferred; Saviynt or CyberArk certifications are a plus
• Fluent English
• Strong leadership and people management skills to build and guide a high-performing IAM/PAM function
• Deep expertise in IAM/PAM technologies and architectures, including IGA, SSO, authentication and authorization patterns
• Excellent understanding of identity lifecycle processes and governance, including privileged access and non-human identities
• Strong risk management mindset to identify, assess, and mitigate identity-related risks in complex environments
• Excellent stakeholder management and communication skills to effectively engage technical teams, HR, business leaders, and auditors
• High analytical and problem-solving skills to design and improve identity controls and processes
• Strong organizational skills to manage multiple initiatives, budgets, and vendor relationships in a global, regulated environment
• Continuous improvement orientation to enhance security posture, user experience, and operational efficiency

Nice to have:

• Knowledge of GxP
• Familiarity with EU AI Act and NIST AI RMF frameworks
• Professional certifications such as CISSP, CISM, CISA
• Experience with Saviynt and CyberArk

• Lead and manage the IAM/PAM team, coordinating with external partners and managed services
• Own the IAM program roadmap, budget, and successful delivery of projects including IAM, SSO, and PAM
• Develop, maintain, and enforce IAM policies, standards, and procedures, ensuring continuous improvement
• Oversee lifecycle management of all identities (human, technical, privileged, AI-driven), including access recertification and segregation-of-duties
• Define and document business and technical requirements for IAM systems and integrated applications
• Govern and monitor privileged access and critical roles, ensuring vault coverage, session controls, and secure break-glass processes
• Extend governance to machine and AI-driven identities, applying regulatory frameworks and best practices
• Act as the primary point of contact for audits and compliance related to identity, managing evidence, findings, and remediation
• Provide strategic advisory and security expertise to IT, HR, business stakeholders, and project teams
• Translate identity risks into business language and support risk assessment, incident response, and continuous improvement

Location: Kraków, Poland with hybrid work mode (3 days/week onsite); fluent English required