Identity and Access Management Manager

Kensington Mortgages; Marlow; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Kensington Mortgages is seeking an Identity & Access Management (IAM) Manager to lead the development and continuous improvement of our IAM capability, ensuring secure access to systems, applications and data across the business.

Reporting to the Chief Information Security Officer, you will shape IAM strategy and collaborate with Technology, Risk, Audit and stakeholders to strengthen security governance and resilience across the organisation.

Qualifications

• Degree or equivalent in Cyber Security, Information Security, Computer Science or a related discipline.
• CISSP and/or CISM certifications.
• Experience delivering IAM governance, controls and lifecycle management.

Responsibilities

• Lead the development and continuous improvement of IAM policies, processes and controls.
• Own and drive the IAM roadmap.
• Develop and maintain IAM governance frameworks, standards and reporting.
• Partner with Technology and business teams to implement identity solutions including SSO and access management.
• Execute access recertification activities in line with audit requirements.
• Support risk, audit and compliance activities with evidence gathering.

Skills

IAM governance

Lifecycle management

Joiner/Leaver design

PAM

Zero Trust

Education

Degree or equivalent in Cyber Security/Information Security/CS

CISSP

CISM

Tools

AWS

Azure

DataDog

SIEM platforms

SQL

Excel

Job description

We're Hiring: Identity & Access Management Manager

Location: Hybrid - 1 x Month Attendance to Marlow

Department: Information Security

Monday-Friday Full Time

Are you passionate about cyber security, governance and identity management? Do you have the technical expertise and stakeholder management skills to drive meaningful improvements across an organisation's security landscape?

At Kensington, we're looking for an experienced Identity & Access Management (IAM) Manager to lead the development and continuous improvement of our IAM capability, ensuring secure, compliant and controlled access to systems, applications and data across the business.

About the Role

Reporting to the Chief Information Security Officer, you'll play a key role in shaping and delivering Kensington's IAM strategy, helping strengthen our security posture, operational resilience and governance framework. You'll work closely with Technology, Risk, Audit and business stakeholders to ensure effective identity management controls are in place and aligned with organisational objectives.

This is an excellent opportunity for an IAM specialist who enjoys combining technical expertise with governance, risk management and continuous improvement activities.

Key Responsibilities

• Lead the development, implementation and continuous improvement of Identity and Access Management policies, processes and controls.
• Own and drive the IAM roadmap, ensuring alignment with business objectives and security requirements.
• Develop and maintain IAM governance frameworks, standards and reporting.
• Partner with Technology and business teams to implement identity solutions covering authentication, authorisation, access management and single sign-on capabilities.
• Execute user access recertification activities in line with audit and regulatory requirements.
• Support risk, audit and compliance activities, including control monitoring and evidence gathering.
• Investigate IAM-related security incidents, perform root cause analysis and implement corrective actions.
• Identify opportunities to strengthen controls, improve automation and enhance operational resilience.
• Stay abreast of emerging IAM trends, technologies and industry best practice.

What We're Looking For

Technical Experience

You’ll bring strong hands‑on experience across Identity & Access Management, including:

• IAM governance and lifecycle management.
• Joiner, Mover and Leaver process design and optimisation.
• Privileged Access Management (PAM).
• Security Information and Event Management (SIEM) platforms.
• Monitoring, alerting and logging solutions.
• DataDog and observability tooling.
• AWS and Azure cloud administration.
• SQL and advanced Excel capability.
• Incident, access and governance processes.
• Zero Trust principles and technologies, including Tailscale.

Stakeholder & Control Experience

We're looking for someone who can confidently:

• Partner with Technology, Risk, Audit and Control functions.
• Support audits and regulatory reviews.
• Build trusted relationships across a range of technical and non-technical stakeholders.
• Drive control improvements and governance initiatives.
• Present complex information clearly and effectively.
• Identify and implement automation opportunities to improve efficiency and reduce risk.

Qualifications

• Degree or equivalent experience in Cyber Security, Information Security, Computer Science or a related discipline.
• CISSP
• CISM

Why Join Kensington?

At Kensington, you'll be joining an organisation committed to innovation, security and continuous improvement. You'll have the opportunity to influence our cyber security strategy, work with senior stakeholders and help shape a modern IAM capability that supports the business's future growth and resilience.