Amber is a global student accommodation platform that helps students find and book full-time housing near top universities across the world. With a presence across multiple geographies, Amber partners with universities, housing providers, and student recruitment platforms to simplify the international student journey.
Role Overview
We are looking for an experienced IT Manager – Identity & Access Management (IAM) & Data Security to own and strengthen Amber's enterprise IT security posture across our global operations.
This role will be responsible for designing, implementing, and governing Identity & Access Management (IAM), enterprise data security, access governance, endpoint security, and IT infrastructure, while ensuring secure access to business-critical applications used across the organization.
The ideal candidate should have hands‑on experience managing Microsoft Entra ID (Azure AD), Active Directory, Microsoft 365, Role-Based Access Control (RBAC), Single Sign-On (SSO), Multi‑Factor Authentication (MFA), Privileged Access Management (PAM), endpoint security, and enterprise IT operations.
Key Responsibilities
Identity & Access Management (Primary Responsibility)
- Own enterprise‑wide Identity & Access Management (IAM) strategy and execution.
- Manage user lifecycle including provisioning, de‑provisioning, access reviews, and privileged access.
- Administer Microsoft Entra ID (Azure AD), Active Directory, Microsoft 365, and enterprise authentication platforms.
- Implement and maintain:
- Role‑Based Access Control (RBAC)
- Single Sign‑On (SSO)
- Conditional Access Policies
- Least Privilege Access
- Privileged Access Management (PAM)
- Conduct periodic access audits to ensure regulatory compliance and eliminate unnecessary access.
Data Security & Cybersecurity (Critical)
- Develop and maintain enterprise security policies and data protection standards.
- Own endpoint security, DLP (Data Loss Prevention), encryption, and device security.
- Monitor security posture and respond to security incidents.
- Conduct vulnerability assessments and remediation planning.
- Drive compliance with ISO 27001, GDPR, SOC2, or equivalent frameworks.
- Implement Zero Trust security principles wherever applicable.
- Partner with internal stakeholders to ensure secure adoption of new business applications.
Enterprise Application & Access Governance
- Own access management across 100+ SaaS platforms and enterprise applications.
- Ensure secure onboarding/offboarding with automated provisioning wherever possible.
- Optimize software licensing, access governance, and utilization.
- Establish approval workflows for privileged access requests.
- Regularly review inactive accounts, excessive permissions, and security risks.
IT Infrastructure & Operations
- Manage Microsoft 365 ecosystem including Exchange Online, Teams, SharePoint, and OneDrive.
- Oversee Active Directory, Azure infrastructure, VPNs, firewalls, Wi‑Fi, and enterprise networking.
- Ensure high availability, disaster recovery, backup, and business continuity.
- Lead IT asset lifecycle management and IT procurement.
Leadership
- Lead and mentor the IT Operations team.
- Partner with HR, Security, Finance, and Business teams on enterprise IT initiatives.
- Drive IT governance, documentation, and process improvements.
- Build scalable IT processes supporting global growth.
Requirements
Experience
- 6–10 years of experience in Enterprise IT Infrastructure & Security.
- Minimum 3 years managing Identity & Access Management (IAM).
- Experience securing enterprise environments supporting 300+ employees.
- Experience managing access across 100+ SaaS applications.
Must‑Have Technical Skills
Identity & Access Management
- Active Directory
- Identity & Access Management (IAM)
- Role‑Based Access Control (RBAC)
- Single Sign‑On (SSO)
- Conditional Access
- Privileged Access Management (PAM)
- Joiner‑Mover‑Leaver (JML) lifecycle management
Data Security
- BitLocker
- Email Security
- Encryption
- Vulnerability Management
- Zero Trust Architecture
- ISO 27001
- GDPR
Infrastructure
- Microsoft 365
- Exchange Online
- SharePoint Online
- OneDrive
- Windows Server
- VMware
- Firewalls
- VPN
- LAN/WAN
- Backup & Disaster Recovery
Behavioral Skills
- Strong ownership with an automation‑first mindset.
- Excellent stakeholder management across global teams.
- Strong analytical and risk assessment capabilities.
- Ability to balance security with business productivity.
- Experience leading enterprise‑wide IT transformation initiatives.
Why Join Amber?
- Be part of a fast‑growing global company..
- Opportunity to build and scale IT infrastructure & security practices.
- Work in a dynamic, high‑impact environment.