Manager of Identity & Access Governance (IAM/PAM)

Galderma is a leading dermatology company present in approximately 90 countries, offering a science-based portfolio in Injectable Aesthetics, Dermatological Skincare and Therapeutic Dermatology. The company emphasizes diversity, inclusion, and professional growth within a regulated, global context. The role is based in Kraków, Poland, within the IT – Cyber Security department.

• Higher education in Information Technology, Information Security or equivalent experience
• Minimum 10 years of experience in IT security, including at least 5 years directly responsible for Identity & Access Management and/or Privileged Access Management
• Proven experience leading teams and managing vendors, integrators, or managed services
• Strong technical understanding of Saviynt and CyberArk (PAM and CyberArk Identity/SIA) or equivalent leading IGA/PAM technologies
• Experience operating identity controls in regulated environments (e.g., SOX/ITGC; GxP exposure is an advantage), including audit support
• Understanding of machine identity and secrets management; familiarity with identity governance for AI agents and emerging frameworks (EU AI Act, NIST AI RMF) is a strong advantage
• Exposure to identity in OT/manufacturing environments is an advantage
• Ability to translate complex identity risk topics into business and executive language
• Professional certifications such as CISSP, CISM, or CISA are strongly preferred; Saviynt or CyberArk certifications are a plus
• Fluent in English
• Strong leadership and people management skills to build and guide a high-performing IAM/PAM function
• Deep expertise in IAM/PAM technologies and architectures, including IGA, SSO, authentication and authorization patterns
• Excellent understanding of identity lifecycle processes and governance, including privileged access and non-human identities
• Strong risk management mindset to identify, assess, and mitigate identity-related risks
• Excellent stakeholder management and communication skills
• High analytical and problem-solving skills to design and improve identity controls and processes
• Strong organizational skills to manage multiple initiatives, budgets, and vendor relationships in a global, regulated environment
• Continuous improvement orientation for security posture, user experience, and operational efficiency

• Lead and manage the IAM/PAM team, including coordination with external partners and managed services
• Own the IAM program roadmap, budget, and successful delivery of projects including IAM, SSO, and PAM
• Develop, maintain, and enforce IAM policies, standards, and procedures, ensuring continuous improvement
• Oversee lifecycle management of all identities (human, technical, privileged, AI-driven), including access recertification and segregation-of-duties
• Define and document business and technical requirements for IAM systems and integrated applications
• Govern and monitor privileged access and critical roles, ensuring vault coverage, session controls, and secure break-glass processes
• Extend governance to machine and AI-driven identities, applying regulatory frameworks and best practices
• Act as the primary point of contact for audits and compliance matters related to identity, managing evidence, findings, and remediation
• Provide strategic advisory and security expertise to IT, HR, business stakeholders, and project teams
• Translate identity risks into business language and support risk assessment, incident response, and continuous improvement