Chief of Secure Access & Trust (IAM & Zero Trust)

Marks and Spencer; Greater London; On-site; GBP 150,000 - 190,000; Full time

Benefits offered by this job

20% colleague discount on products

Competitive holiday allowance

Discretionary bonus schemes

Strong pension and life assurance

Induction and training

M&S Choices portal

Family policies

Wellbeing support

Volunteer day

Job summary

Marks & Spencer is seeking a Head of Secure Access & Trust to define the enterprise strategy for trusted access to technology and information. You will govern identity lifecycle, access governance, privileged access and trust standards across people, devices, apps, services and AI agents.

You will lead a secure platform that supports cloud-native and AI-enabled environments, delivering secure, resilient platform services with a strong focus on risk management and regulatory compliance.

Qualifications

• Proven experience defining and leading enterprise IAM and Zero Trust strategies.
• Expertise in identity governance and privileged access management.
• Experience managing secure access and identity platforms.
• Ability balance cyber risk, regulatory compliance and business growth.

Responsibilities

• Define and lead the Secure Access & Trust strategy, owning the roadmap and governance.
• Own enterprise identity and trust governance across people, devices, apps and services.
• Lead the platform ensuring authentication, authorization, directory and remote access are secure.
• Enable secure engineering with reusable platform capabilities and self-service services.
• Drive cyber risk reduction and operational resilience through governance and measurable outcomes.

Skills

Enterprise IAM

Zero Trust

Identity governance

Privileged access management

Authentication & Authorization

Cloud & on-premise

Leadership

Stakeholder management

Job description

Marks & Spencer is seeking a Head of Secure Access & Trust to define the enterprise strategy for trusted access to technology and information. You will govern identity lifecycle, access governance, privileged access and trust standards across people, devices, apps, services and AI agents.

You will lead a secure platform that supports cloud-native and AI-enabled environments, delivering secure, resilient platform services with a strong focus on risk management and regulatory compliance.