IAM Continuous Assurance Manager

Jobgether; Brasil; On-site; BRL 280,000 - 460,000; Full time

Benefits offered by this job

Global collaboration

Professional development

Leadership opportunity

Performance recognition

Work-life balance

Job summary

Jobgether in Brazil is seeking an experienced IAM Continuous Assurance Manager. You will lead the evolution of identity and access management assurance toward a proactive, continuous, and risk-based approach, overseeing IGA and PAM controls and partnering with engineering, audit, risk, and compliance teams to automate testing and remediation.

You will drive data analytics, automation, and approved AI capabilities to reduce manual work, strengthen security governance, and shape a strategic

Qualifications

• Advanced English proficiency.
• Proven IAM, security assurance, IT risk, or audit leadership experience.
• Experience designing or operating Continuous Assurance, CCM, or data-driven assurance programs.

Responsibilities

• Lead design and continuous improvement of the IAM Continuous Assurance framework.
• Establish IGA and PAM assurance controls to ensure governance and access integrity.
• Define monitoring for identity lifecycle, access requests, RBAC, and SOX-like controls.
• Collaborate with IAM Engineering to develop repeatable testing and monitoring processes.
• Automate control testing and evidence collection using analytics and approved AI where appropriate.
• Act as SME in IGA and PAM assurance and govern supporting evidence.
• Identify excessive access, control failures, and privileged access risks.
• Coordinate remediation with control owners and ensure timely resolution.
• Develop risk-based monitoring for critical apps and high-risk access.
• Lead IAM Assurance team and strengthen data-driven decision-making capabilities.
• Maintain IAM Assurance operating model with clear accountability.

Skills

IAM

Security assurance

Leadership

CCM

Governance

Risk management

Communication

SQL

Project management

Stakeholder management

Tools

SailPoint

Okta

CyberArk

AWS

Microsoft Entra ID

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an IAM Continuous Assurance Manager based in Brazil.

We are seeking an experienced IAM Continuous Assurance Manager to lead the evolution of identity and access management assurance toward a proactive, continuous, and risk-based approach. In this leadership role, you will oversee assurance strategies covering Identity Governance and Administration (IGA) and Privileged Access Management (PAM), helping strengthen security controls across critical systems. You will partner with engineering, audit, risk, compliance, and technology teams to automate control testing, improve monitoring coverage, and ensure timely remediation of access-related risks. By leveraging data analytics, automation, and approved AI capabilities, you will help identify vulnerabilities earlier and reduce manual processes. This is an opportunity to shape a strategic assurance operating model, develop a specialized team, and strengthen security governance across a complex global organization.

Accountabilities:

• Lead the design, implementation, and continuous improvement of the IAM Continuous Assurance framework, including automated control monitoring, risk analysis, exception management, validation, and reporting.

• Establish and assess IGA and PAM assurance controls to ensure identity governance, privileged access, and supporting processes operate effectively.

• Define and monitor controls covering identity lifecycle management, access requests and approvals, role‑based access control, segregation of duties, privileged access, and periodic access reviews.

• Partner with IAM Engineering to develop repeatable testing and monitoring processes using IAM, HR, IT service management, directory, and application data.

• Automate control testing and evidence collection through analytics, workflow tools, and approved AI capabilities where appropriate.

• Act as a subject matter expert in IGA and PAM assurance, evaluating governance processes, technical controls, operational practices, exceptions, and supporting evidence.

• Identify inappropriate or excessive access, control failures, overdue certifications, orphan accounts, policy exceptions, and privileged access risks.

• Conduct root cause analysis and coordinate remediation activities with control owners, ensuring issues are resolved within agreed timelines.

• Develop risk‑based monitoring strategies focused on critical applications, privileged identities, high‑risk access, and material control exceptions.

• Lead and develop the IAM Assurance team by setting objectives, priorities, and performance expectations while strengthening capabilities in risk management, controls, and data‑driven decision‑making.

• Define and maintain the IAM Assurance operating model, ensuring clear accountability, appropriate independence, effective governance, and alignment with organizational frameworks.

• Provide technical and domain leadership in IAM governance, IGA, PAM, access controls, and relevant security standards, including ISO 27001.

• Collaborate with Internal Audit, Risk, Compliance, Technology, and business stakeholders to coordinate assurance activities, support audit readiness, and oversee timely remediation.

• Maintain IAM governance metrics and reporting, providing leadership with clear visibility into control effectiveness, emerging risks, and improvement opportunities.

Requirements:

• Advanced English proficiency.

• Proven experience in IAM, security assurance, IT risk, audit, or a related discipline, including experience leading teams or programs. People management experience is strongly preferred.

• Experience designing, implementing, or operating Continuous Assurance, Continuous Controls Monitoring (CCM), automated compliance monitoring, or data-driven assurance programs.

• Strong hands‑on or governance experience in Identity Governance and Administration (IGA), including joiner/mover/leaver processes, access certifications, role‑based access control, privileged access, and segregation of duties.

• Strong knowledge of Privileged Access Management (PAM), including privileged account discovery and onboarding, credential management, access approvals, privileged session controls, least privilege principles, and reducing standing privileged access.

• Experience evaluating the design and operational effectiveness of IGA and PAM controls, identifying weaknesses, and translating findings into sustainable corrective actions.

• Familiarity with IAM platforms such as SailPoint, Okta, CyberArk, AWS, Microsoft Entra ID, or equivalent technologies.

• Knowledge of security and risk management frameworks such as ISO 27001, NIST, PCI DSS, and Zero Trust, with the ability to translate requirements into effective IAM controls.

• Experience managing assurance or audit activities, with a strong understanding of accountability, independence, constructive challenge, and remediation practices.

• Ability to analyze identity and access data to identify exceptions, trends, and control weaknesses.

• Strong communication, project management, and stakeholder management skills, including the ability to explain risks and provide constructive challenge to diverse audiences.

Nice to have:

• Experience implementing, operating, or providing assurance over SailPoint and CyberArk environments.

• Familiarity with automation, analytics, workflow tools, or robotic process automation (RPA) to improve assurance processes.

• Knowledge of approved AI and generative AI use cases for assurance and control monitoring.

• Experience defining key risk indicators (KRIs), key performance indicators (KPIs), control health metrics, exception reporting, and executive IAM risk reports.

• Proficiency in SQL, scripting, or reporting tools.

• CISSP, CISM, or other relevant cybersecurity certifications.

Benefits:

• Opportunity to lead and shape a strategic IAM Continuous Assurance function.

• Collaborative environment working with global security, engineering, audit, risk, and compliance teams.

• Opportunities to develop leadership capabilities and build a specialized assurance team.

• Inclusive, people-centered culture that values diversity, well-being, and professional development.

• Work environment that supports balance between professional responsibilities and personal interests.

• Recognition through workplace certifications and employer awards.