Identity and Access Control Manager

Overview

This role involves leading the enterprise Identity and Access Management (IAM) program, including IGA, MFA, SSO, and PAM. The candidate will be responsible for defining and enforcing access control policies, managing lifecycle processes, and ensuring audit readiness. They will provide operational leadership and hands-on support to ensure smooth delivery of daily IAM services like access requests, provisioning, reviews, PAM management, SSO/MFA onboarding, and incident response with internal teams and service providers.

Responsibilities

• Develop and maintain IAM policies, standards, and control objectives encompassing Joiner-Mover-Leaver (JML) processes, multi-factor authentication, privileged access, service accounts, access reviews, segregation of duties (SoD), break-glass procedures, and logging/monitoring.
• Define and implement the IAM operating model including roles and responsibilities (RACI), handling exceptions, risk acceptance, control assessments, and establish service level agreements and escalation procedures.
• Lead the IAM roadmap development, improve service delivery workflows including request catalog and fulfillment, and drive continual service enhancements.
• Manage identity lifecycle activities and periodic access reviews through role and entitlement modeling (RBAC/ABAC), certifications, remediation of issues, orphaned account cleanup, and integration reliability with HR, ITSM, and directory services.
• Administer privileged access governance covering onboarding standards, vault and session controls, credential rotation, break-glass testing, service/admin account management, and support for privileged access incident responses.
• Oversee the standardization and operation of SSO and MFA onboarding processes including security controls, federation stability, enrollment support, and authentication policy configuration in collaboration with IT teams.
• Maintain detailed runbooks and standard operating procedures; coordinate with Security Operations Center and Incident Response during incidents to ensure swift containment, including revocation of access, investigation assistance, and evidence gathering.
• Act as the primary IAM liaison for audits and various stakeholders; monitor and report on vendor and partner performance.

Education and Experience

• Bachelor's degree in Information Technology or a closely related discipline.
• Between 4 and 6 years of relevant professional experience in identity and access management or related fields.

Required Skills and Qualifications

• Fluency in both Arabic and English, with strong written and verbal communication skills.
• Solid understanding of IT and cybersecurity principles.
• Excellent communication abilities to effectively convey complex information.
• Advanced proficiency in Microsoft Office applications, especially PowerPoint and Excel.