Identity & Technology Risk Lead

Consultz; Abu Dhabi; On-site; AED 293,000 - 368,000; Full time

Job summary

A leading consultancy firm is seeking an experienced Identity & Technology Risk Lead for their client in Abu Dhabi. This role involves developing and executing identity governance strategy and managing technology risks. Candidates should have at least 10 years of experience in identity management, proven expertise in Identity Governance solutions like SailPoint IdentityIQ, and strong communication skills. The position requires collaboration across various departments and supports secure solution designs.

Qualifications

• 10 years of experience in identity management and technology risk.
• Proven expertise in Identity Governance & Administration solutions.
• Deep understanding of access control principles and compliance standards.

Responsibilities

• Own the development and execution of IAG strategy.
• Design and operate IGA tooling to automate access controls.
• Lead initiatives to embed risk assessments across solutions.

Skills

Identity Governance & Administration

Risk Management

Stakeholder Management

Access Control Principles

DevOps Collaboration

Education

Professional certifications (CISSP, CISA, CRISC)

Tools

SailPoint IdentityIQ

Cloud Platforms

Job description

Consultz is supporting our client a well-renowned SWF in the region in their search for Identity & Technology Risk Lead.

The purpose of the role encompasses the following main areas:

We are seeking a strategic and technically strong Identity & Technology Risk Architect to lead the identity governance and technology risk management efforts. This individual will be responsible for architecting and operationalizing our Identity & Access Governance (IAG) program designing scalable controls to support access lifecycle and policy enforcement and driving continuous improvements in how Digital & AI and the broader organization manage technology risk. This role will work at the intersection of security architecture enterprise systems, DevOps, and governance, serving as a key partner to auditors, technology leaders, and risk stakeholders.

Managerial Responsibilities

Core Responsibilities

• Own the development and execution of the organization's Identity & Access Governance (IAG) strategy and program.
• Design, implement, and operate IGA tooling such as SailPoint IdentityIQ to automate and enforce:
  • Birthright access control
  • Segregation of duties (SoD)
  • Toxic combination detection
  • Access reviews and recertification
  • Define policies and guardrails across critical applications platforms and infrastructure to support secure compliant access provisioning

Technology Risk Management

• Identify, register, and manage technology risks for the Digital & AI division and broader enterprise as relevant.
• Lead initiatives to embed risk assessments and controls across solution development, cloud engineering, and platform architecture.
• Collaborate with GRC, legal, and risk teams to ensure alignment with enterprise-wide risk frameworks and standards.

Collaboration and Support

• Support Enterprise Architecture and DevOps teams in integrating identity and risk design into technical architectures and CI/CD pipelines.
• Contribute to secure design reviews, risk assessments, and threat modeling efforts.
• Serve as a subject matter expert on identity and access architecture.

Audit and Assurance

• Act as the primary point of contact for internal and external audits related to IT access controls, identity governance, and technology risk posture.
• Manage evidence gathering, documentation control, testing, and remediation tracking.

People Management Responsibilities

• No direct people management but expected to have solid stakeholder management skills to work across the company with multiple departments.

Requirements

Experience

• 10 years of experience in identity management and technology risk.
• Proven expertise in Identity Governance & Administration (IGA) solutions, especially SailPoint IdentityIQ, including implementation and operation.
• Deep understanding of access control principles, SoD models, toxic combinations, and compliance standards.
• Experience with technology risk frameworks (e.g., NIST CSF, ISO 27005, COBIT).
• Hands‑on experience working with DevOps and enterprise IT teams in secure solution design.
• Professional certifications: CISSP, CISA, CRISC or Identity-focused certifications (e.g., Certified Identity and Access Manager).
• Experience integrating identity tooling with HR systems, ITSM, cloud platforms, and application catalogs.
• Strong communication and stakeholder engagement skills, including audit and regulator interactions.