Head of Identity Security & Access Management

asx; Sydney; On-site; AUD 190,000 - 270,000; Full time

Job summary

ASX is seeking a senior leader to transform the enterprise Identity Security function, setting strategy and overseeing design, delivery, assurance and operation of identity capabilities across the organization.

You will own multiple domains including governance, privileged security, authentication, customer identity, and machine identities, driving automation, risk-aware controls, and resilient access across platforms.

Responsibilities

• Lead and transform the enterprise Identity Security function, setting strategy and overseeing the design, delivery, assurance and operation of identity capabilities.
• Set and deliver the enterprise identity security strategy, roadmap, architecture and operating model.
• Own five integrated capability domains: identity governance and administration; privileged identity security; enterprise identity and authentication; customer identity and digital trust; and machine, workload and emerging identity security.
• Lead identity governance and administration across the full lifecycle, including joiner, mover and leaver processes, access requests, provisioning, entitlement governance, segregation of duties, role and attribute-based access, recertification, contractor lifecycle, and orphaned or dormant identities.
• Oversee the operating effectiveness of lifecycle controls and use automation to improve control reliability, timeliness, scalability and user experience.
• Lead privileged identity security across infrastructure, databases, cloud, SaaS, Entra roles, DevOps, emergency access, service identities, credentials and secrets. Minimise standing privilege, use Just-In-Time and Just-Enough Administration where appropriate, and manage standing access as an approved exception.
• Define and enforce enterprise standards for authentication, authorisation, federation, single sign-on, multi-factor authentication, Conditional Access and least privilege. Progress access towards risk-aware and adaptive controls based on identity risk, privilege, device posture and service criticality.
• Lead customer identity and digital trust, setting direction for secure, resilient and efficient authentication, authorisation, federation, credential management and identity lifecycle services for customers, market participants and digital channels.
• Establish and govern machine, workload and emerging identity security, including service and application accounts, cloud workload identities, API credentials, certificates, cryptographic keys, automation identities, secrets and AI agent identities.
• Ensure identity platforms and services are secure, resilient, scalable and supported by effective service management, patching, monitoring, disaster recovery, incident response and workforce continuity.

Skills

Identity security

Cyber governance

Security strategy

Leadership

Risk management

Job description

ASX is seeking a senior leader to transform the enterprise Identity Security function, setting strategy and overseeing design, delivery, assurance and operation of identity capabilities across the organization.

You will own multiple domains including governance, privileged security, authentication, customer identity, and machine identities, driving automation, risk-aware controls, and resilient access across platforms.