IAM Transformation Lead

A multi-company group is building its IAM capability across several portfolio companies, each with its own IT function. The governance framework, the target operating model and the IAM control set are designed, and the selection of an IGA platform is in the last stages of an RFP. The role involves turning this foundation into an operational platform in production with applications onboarded, roles defined, and controls producing evidence on a cadence. It is a build role in a federated group with no precedent IAM function above it, leading a project team and accountable for the delivery and group IAM maturity.

• 8+ years in IAM, information security, governance or risk, with at least 2 years in a lead or ownership role.
• Proven experience building an IAM or control function from scratch.
• Delivered at least one end-to-end IGA platform implementation including vendor and partner management.
• Experience leading a mixed team of analysts and engineers.
• Able to run the programme as its own project manager without PMO support.
• Skilled at obtaining and maintaining decisions from senior stakeholders.
• Deep working knowledge of IAM subjects including joiner, mover, leaver processes, role and entitlement design, segregation of duties, access reviews, and privileged access.
• Experience operating in complex federated or multi-entity organizations.
• Comfortable working directly with access data extracts.
• Familiarity with regulatory, control frameworks, audits, and evidence requirements.
• Strong stakeholder management at executive level with ability to articulate IAM risk in business terms.
• Mandatory English language proficiency at C1 level; Spanish and German are a plus.

Nice to have:

• Experience reporting into a parent company against a defined maturity framework.
• Microsoft Entra ID and Active Directory at multi-tenant or multi-forest scale.
• HR-driven identity lifecycle from an HCM platform.
• Privileged access management implementation experience.

Leading the team:

• Lead a project team of two IAM business analysts and three IAM integration engineers, setting direction, priorities and standard of work.
• Allocate team across governance workstreams and platform integration, rebalancing as programme moves from design into delivery.
• Build team capability in a function being established for the first time.
• Hold implementation partner and managed services to internal team standards.

Programme delivery and IAM platform:

• Set IAM programme agenda and bring proposals and decisions to governance forums.
• Own delivery of IAM platform implementation including scope, plan, milestones, budget, and dependencies.
• Direct implementation partner and managed services alongside internal integration capacity.
• Translate IAM requirements into platform configuration and own resolution of mismatches.
• Own application onboarding: sequencing, connector delivery, testing, and cutover.
• Manage commercial relationships post-signature including license metrics and change control.
• Report progress, risks, and decisions to steering committee and executive stakeholders.

Governance, policy and operating model:

• Own and maintain IAM policies, standards, and procedures.
• Own IAM Target Operating Model across process, tooling, and organization.
• Define IAM decision rights, accountabilities, and escalation paths, updating as function grows.
• Ensure alignment with regulatory and internal requirements including ISO 27001 and DORA.

Risk, control and compliance:

• Own IAM control set: objectives, design, execution cadence, and evidence model.
• Move controls from design into operation and effectiveness testing.
• Own IAM risk register and exception management.
• Coordinate IAM audits and regulatory reviews.
• Own group IAM maturity position and annual self-assessment.
• Define and track IAM KPIs and maturity metrics.

Portfolio company engagement:

• Secure adoption of group IAM operating model across portfolio companies.
• Engage IAM domain owners, business owners, and application owners in reviews and approvals.
• Collaborate with HR, service desk, and infrastructure teams on joiner, mover, leaver processes.
• Operate through influence across company boundaries.

Role and access model:

• Own business role model: design principles, taxonomy, eligibility, and lifecycle.
• Own authorization concepts, application criticality, and entitlement risk classification.
• Own segregation of duties: rule design, conflict analysis, exception handling.

Oversight and reporting:

• Approve deviations and exceptions to IAM standards.
• Provide guidance to portfolio companies and application owners.
• Report IAM posture, risk, and progress to senior management and parent company.

Informujemy, że administratorem danych jest N-iX z siedzibą w Krakowie, Krowoderska 63B/6 (dalej jako "administrator"). Masz prawo do żądania dostępu do swoich danych osobowych, ich sprostowania, usunięcia lub ograniczenia przetwarzania, prawo do wniesienia sprzeciwu wobec przetwarzania, a także prawo do przenoszenia danych oraz wniesienia skargi do organu nadzorczego. Dane osobowe przetwarzane będą w celu realizacji procesu rekrutacji. Podanie danych w zakresie wynikającym z ustawy z dnia 26 czerwca 1974 r. Kodeks pracy jest obowiązkowe. W pozostałym zakresie podanie danych jest dobrowolne. Odmowa podania danych obowiązkowych może skutkować brakiem możliwości przeprowadzenia procesu rekrutacji. Administrator przetwarza dane obowiązkowe na podstawie ciążącego na nim obowiązku prawnego, zaś w zakresie danych dodatkowych podstawą przetwarzania jest zgoda. Dane osobowe będą przetwarzane do czasu zakończenia postępowania rekrutacyjnego i przez okres możliwości dochodzenia ewentualnych roszczeń, a w przypadku wyrażenia zgody na udział w przyszłych postępowaniach rekrutacyjnych - do czasu wycofania tej zgody. Zgoda na przetwarzanie danych osobowych może zostać wycofana w dowolnym momencie. Odbiorcą danych jest serwis Just Join IT oraz inne podmioty, którym powierzyliśmy przetwarzanie danych w związku z rekrutacją.