IAM Continuous Assurance Manager (Brazil based only)

Experian plc; São Paulo; Remote; BRL 350,000 - 520,000; Full time

Job summary

Experian plc seeks an IAM Continuous Assurance Manager based in Brazil to lead a team evolving the assurance model to continuous, risk-based monitoring across critical systems. You will define the IAM assurance framework, focusing on IGA and PAM, and automate testing, validation, and evidence collection.

You will work with control owners, internal audit, risk, and compliance to improve control effectiveness, investigate access risks, and promote independent assurance practices across Experian's

Qualifications

• Advanced English required with strong communication skills.
• Experience leading IAM assurance programs and teams.
• Experience designing continuous assurance and CCM.
• Deep hands-on or governance experience in IGA and PAM.
• Strong knowledge of PAM controls and least privilege.
• Experience assessing IGA/PAM design and operation.
• Familiarity with SailPoint, Okta, CyberArk, AWS, Entra ID.
• Knowledge of ISO 27001, NIST, PCI DSS, Zero Trust.
• Experience managing assurance or audit activities.
• SQL, scripting or reporting skills advantageous.

Responsibilities

• Lead IAM Continuous Assurance design and improvement.
• Establish controls for IGA and PAM; monitor effectiveness.
• Define lifecycle, access requests, RBAC, and reviews.
• Automate testing/evidence collection with analytics and AI.
• Advise on governance processes, exceptions, and evidence.
• Identify access risks; coordinate remediation to completion.
• Develop risk-based monitoring for critical apps and privileged IDs.
• Lead IAM Assurance team with clear objectives and metrics.
• Maintain IAM Assurance operating model and governance.
• Provide leadership on IAM governance, ISO 27001 alignment.
• Coordinate with Internal Audit, Risk, Compliance, and Tech.

Skills

Advanced English

People management

Continuous Assurance

CCM (Continuous Controls Monitoring)

Data-driven assurance

IGA governance

PAM governance

IGA/PAM controls assessment

IAM platforms (SailPoint, Okta, Cyber​

IAM platforms (SailPoint, Okta, Cyber​

ISO 27001 / NIST / PCI DSS / ZeroTrust

Assurance/audit management

SQL / scripting / reporting

Tools

SailPoint

CyberArk

Okta

AWS

Microsoft Entra ID

Job description

IAM Continuous Assurance Manager (Brazil based only)

• Full-time
• Employee Status: Regular
• Role Type: Home
• Department: Information Security
• Schedule: Full Time

As a leader within the Identity & Access Management (IAM) department of the Experian Global Security Office, you will lead a team responsible for evolving the IAM assurance model from periodic assessments to a continuous, risk-based monitoring approach across critical systems.

You will define the IAM assurance framework and reporting approach, with a particular focus on Identity Governance & Administration (IGA) and Privileged Access Management (PAM) controls, partnering with IAM Engineering teams to automate control testing, validations, and evidence collection.

You will work closely with control owners to investigate access-related risks, coordinate remediation activities, and improve control effectiveness. You will also coordinate assurance activities with Internal Audit, Risk Management, and Compliance teams, ensuring clear accountability and the appropriate level of independence.

By leveraging data, analytics, automation, and approved AI capabilities where appropriate, you will help expand monitoring coverage, identify issues earlier, strengthen compliance, and reduce manual effort. You will lead the IAM Assurance operating model and promote effective identity governance, privileged access controls, and continuous assurance practices across the organization.

Key Responsibilities

• Lead the design, implementation, and continuous improvement of IAM Continuous Assurance, including automated control monitoring, risk analysis, exception management, ongoing control validation, and assurance reporting.
• Establish and continuously assess assurance controls related to IGA and PAM, ensuring identity governance, privileged access, and supporting processes operate effectively and that control deficiencies are identified and remediated.
• Define and monitor controls related to identity lifecycle management, access requests and approvals, role-based access control, privileged access, segregation of duties, and periodic access reviews.
• Build repeatable testing and monitoring processes using IAM, HR, IT Service Management, directory, and application data; partner with IAM Engineering to automate control testing and evidence collection through analytics, workflow tools, and approved AI capabilities where appropriate.
• Serve as a subject matter expert in IGA and PAM assurance, including the evaluation of governance processes, technical controls, operational practices, exceptions, and control evidence.
• Identify inappropriate or excessive access, control failures, overdue access certifications, orphan accounts, policy exceptions, privileged access risks, and other identity-related risks; perform root cause analysis and coordinate remediation through to completion.
• Develop risk-based monitoring approaches focused on critical applications, privileged identities, high-risk access, control exceptions, and other material identity-related risks.
• Lead and develop the IAM Assurance team by setting clear objectives, priorities, and performance expectations while building capabilities in risk, controls, assurance, and data-driven decision making.
• Define and maintain the IAM Assurance operating model, ensuring clear accountability, appropriate independence, effective governance, and alignment with organizational frameworks.
• Provide technical and domain leadership in IAM governance, IGA, PAM, access control, and relevant frameworks such as ISO 27001; influence policies, standards, and best practices while remaining current on IAM technologies and industry trends.
• Partner with Internal Audit, Risk, Compliance, Technology, and business stakeholders; oversee relevant audit engagements, maintain IAM governance metrics and reporting, and support audit readiness and timely remediation efforts.

How Success Will Be Measured

• IAM control issues are identified early, assigned to clear owners, and resolved within agreed timelines.
• The effectiveness of IGA and PAM controls is measurable, with increasing automation of monitoring for critical and high-risk controls.
• Access reviews are completed on time with reliable evidence and proper exception management.
• Privileged access risks and exceptions are identified through repeatable monitoring processes and managed through defined remediation procedures.
• Monitoring coverage extends across critical systems and high-risk access, with a continuous reduction in manual gaps.
• Audit requests are supported by complete, consistent, and traceable evidence.
• Leadership receives timely reporting that enables effective understanding and management of IAM risks.
• Control improvements reduce recurring findings, unnecessary access, and avoidable exceptions.

Proven Experience and/or Knowledge In:

• Advanced English;
• Experience in IAM, security assurance, IT risk, audit, or a related discipline, including experience leading teams or programs. People management experience is strongly preferred.
• Experience designing, implementing, or operating Continuous Assurance, Continuous Controls Monitoring (CCM), automated compliance monitoring, or data-driven assurance programs.
• Strong hands-on or governance experience in Identity Governance and Administration (IGA), including joiner/mover/leaver processes, access certifications, role-based access control, privileged access, and segregation of duties.
• Strong knowledge of Privileged Access Management (PAM), including privileged account discovery and onboarding, credential management, access approvals, privileged session controls, least privilege principles, and reducing standing privileged access.
• Experience assessing the design and operational effectiveness of IGA and PAM controls, identifying control gaps, and translating findings into sustainable corrective actions.
• Experience with IAM platforms such as SailPoint, Okta, CyberArk, AWS, or Microsoft Entra ID, or equivalent technologies.
• Knowledge of security and risk management frameworks such as ISO 27001, NIST, PCI DSS, and Zero Trust, with the ability to translate requirements into effective IAM controls.
• Experience managing assurance or audit activities, with a strong understanding of accountability, independence, constructive challenge, and remediation practices.
• Ability to analyze identity and access data to identify exceptions, trends, and control weaknesses; experience with SQL, scripting, or reporting tools is considered an advantage.

Desired Skills

• Experience implementing, operating, or providing assurance over SailPoint and CyberArk environments is highly desirable.
• Experience using automation, analytics, workflow tools, or RPA to improve assurance processes; familiarity with approved AI or GenAI use cases is an advantage.
• Experience defining KRIs, KPIs, control health metrics, exception reporting, and executive IAM risk reporting is considered a plus.
• Strong communication, project management, and stakeholder management skills, including the ability to provide constructive challenge and explain risk to diverse audiences.
• CISSP, CISM, or other relevant cybersecurity certifications are considered an advantage.

Experian Careers - Creating a better tomorrow together

Experian Careers - Creating a better tomorrow together