Privileged Access Management (PAM) Lead

Hargreaves Lansdown PLC; West of England; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Discretionary bonus

25 days holiday

Hybrid working

Pension contributions

Private medical insurance

Wellbeing program

Volunteering days

Job summary

Hargreaves Lansdown PLC in Bristol is seeking a PAM Lead to provide technical leadership across Privileged Access Management, focusing on CyberArk Privilege Cloud and EPM. You will define standards, drive architecture and mentor PAM engineers.

You will partner with Infrastructure, Cloud and Security teams to secure privileged accounts and identities, support audits and shape the PAM roadmap while balancing delivery and operations.

Qualifications

• Extensive experience in Privileged Access Management within complex enterprise environments, preferably financial services.

Responsibilities

• Act as the technical lead and SME for PAM technologies, processes and controls.
• Own the technical roadmap for PAM services and align with security strategy and risk objectives.
• Lead optimisation of CyberArk Privilege Cloud and Endpoint Privilege Manager (EPM) implementations.
• Develop strategies for securing privileged accounts, service accounts and machine identities.
• Mentor PAM Engineers and Analysts and drive operational excellence.

Skills

Privileged Access Management

CyberArk Privilege Cloud

CyberArk Endpoint Privilege Manager (E

Tools

CyberArk Privilege Cloud

Endpoint Privilege Manager (EPM)

Job description

Excited to grow your career? Our purpose is to make it easy for people to save and invest for a better future. We are looking for great people to join us, so please come and invest in YOUR future at Hargreaves Lansdown. We know that sometimes people can be put off applying for a job if they don't tick every box. If you're excited about working for us and have most of the skills or experience we're looking for, we’d love to hear from you!

About the role

The PAM Lead is responsible for providing technical leadership, strategic direction and subject matter expertise across Privileged Access Management (PAM) services. This role will lead the design, implementation, operation and continuous improvement of HL's PAM capabilities, ensuring privileged access risks are effectively managed while enabling colleagues to work efficiently and securely. As the senior technical specialist within the PAM function, you will be responsible for defining standards, driving best practice, supporting complex technical delivery and acting as a key escalation point for privileged access services. The role has a particular focus on CyberArk Privilege Cloud, Endpoint Privilege Manager (EPM), secrets management, machine and non-human identities, and the broader privileged access ecosystem. The role will also provide leadership and mentoring for PAM engineers and analysts, helping develop technical capability within the team whilst driving operational excellence and service maturity.

What You’ll Be Doing

• Act as the technical lead and primary SME for Privileged Access Management technologies, processes and controls.
• Own the technical roadmap for PAM services, ensuring alignment with HL's security strategy and risk management objectives.
• Lead the continuing optimisation of CyberArk Privilege Cloud and Endpoint Privilege Manager (EPM) implementations.
• Develop and maintain strategies for securing privileged accounts, service accounts, machine identities and other non-human identities.
• Provide technical leadership for PAM-related projects, enhancements and operational initiatives.
• Act as the highest technical escalation point for PAM incidents, issues and complex troubleshooting activities.
• Define and maintain PAM architecture standards, engineering patterns and operational procedures.
• Collaborate with Infrastructure, Cloud, Application Development, Security Operations and Risk teams to deliver secure access solutions.
• Support audits, regulatory reviews and control assessments, providing evidence and guidance where required.
• Monitor emerging threats, vulnerabilities and industry best practice to ensure PAM controls remain effective and relevant.
• Provide technical mentoring, coaching and development support for PAM Engineers and Analysts.
• Support resource planning, workload prioritisation and performance management activities within the PAM team where required.
• Contribute to the wider Identity & Access Management strategy and roadmap.
• Build strong relationships with stakeholders across Technology, Security and Business functions.
• Challenge existing processes and technologies, driving continual improvement and innovation.

About You

Extensive experience in Privileged Access Management within complex enterprise environments – ideally within financial services. Demonstrable hands-on experience administering and engineering CyberArk Privilege Cloud. Strong experience with CyberArk Endpoint Privilege Manager (EPM). Experience implementing and managing secrets management solutions for applications, cloud platforms and infrastructure services. Strong understanding of service accounts, machine identities, API credentials and wider non-human identity security principles. Good understanding of Identity and Access Management concepts including authentication, authorisation, RBAC and least privilege. Strong technical knowledge across Active Directory, Entra ID, Windows Server, Linux, cloud platforms and enterprise infrastructure. Experience developing automation using PowerShell, scripting or other relevant technologies. Ability to analyse complex technical issues and identify pragmatic, risk-based solutions. Strong stakeholder management skills with the ability to influence technical and non-technical audiences. Comfortable balancing operational support, strategic planning and technical delivery responsibilities. Ability to mentor, coach and develop technical colleagues. Self-driven, highly motivated and capable of working with minimal supervision. Strong written and verbal communication skills with the ability to translate technical concepts into business language. Confident challenging the status quo and identifying opportunities for continuous improvement. Strong understanding of information security principles, risk management and security controls.

Qualifications – Desirable

CyberArk Privilege Cloud/EPM certification such as Defender, Sentry or Certified Delivery Engineer. Information Security certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager) or CCSP (Certified Cloud Security Professional).

Interview process

2 stage interview process – Initial Interview followed by competency, technical & scenario-based questions.

Working Schedule

This role is based in Bristol Welcome Building. This role is permanent, full time, 37.5 hours per week, Monday to Friday. We have returned to the office 2 days a week.

Why us?

Here at HL, we’re the UK’s number 1 investment platform for private investors, based in Bristol. For more than 40 years we’ve helped investors save time, tax and money on their investments. To achieve our mission, we believe we have a workplace like no other, with constant learning, dynamic teams, and a great ethos. We're steered by core values that promote service, quality, innovation, and opportunity in everything we do.

What's on offer?

• Discretionary annual bonus* and annual pay review
• 25 days* holiday plus bank holidays and 1-day additional Christmas closure
• Option to purchase an additional 5 days holiday**
• Flexible working options available, including hybrid working
• Enhanced parental leave
• Pension scheme up to 11% employer contribution
• Income Protection and Life insurance (4 x salary core level of cover)
• Private medical insurance*
• Health care cash plans - including optical, dental, and outpatient care
• Health screening programme
• Help@hand - confidential support including mental health counselling and remote GP
• Wellhub - unlimited access to fitness providers and wellness coach sessions
• Variety of travel to work schemes with bike storage and shower facilities
• Inhouse barista and deli serving subsidised coffee and sandwiches
• Two paid volunteering days per year *

Hargreaves Lansdown is an inclusive employer that values diversity in its workforce. We encourage applications from all individuals without regard to race, religion, gender, sexual orientation, national origin, disability or age. This role may also be available on a flexible working or part time basis – please ask the Recruitment & Onboarding team for more information. Please note, we are unable to provide employment sponsorship to candidates.

Hargreaves Lansdown is the UK's number one platform for private investors. Our purpose is to empower people to save and invest with confidence, and today, we are trusted with more than £120 billion by over 1.7 million clients. We are based in the heart of Bristol now with over 2,000 colleagues. We believe we have a workplace like no other, with constant learning, dynamic teams and a great ethos. We're steered by our core values that promote service, quality, innovation, and opportunity in everything we do.