Manager IAM Architecture

Prudential Hong Kong Limited; Bengaluru; On-site; INR 11,353,000 - 17,029,000; Full time

Job summary

Prudential Hong Kong Limited is seeking an IAM Security Assurance Architect to review new applications, platforms, cloud services, and changes to ensure alignment with baseline IAM security requirements before go-live.

The role leads as the IAM security review authority and builds automation for continuous assurance that identity controls remain effective through the application lifecycle. Focus is on rigorous reviews and always-on assurance.

Qualifications

• Bachelor's degree in CS/InfoSec or related field.
• 8+ years in information security with 5+ IAM focus.
• 3+ years IAM design reviews or control assurance.
• Hands-on automation for control validation and evidence collection.
• Experience integrating IAM tooling and audits.

Responsibilities

• Perform IAM/security design reviews for applications and platforms.
• Evaluate designs against baseline IAM requirements.
• Develop automation for continuous assurance and evidence collection.
• Collaborate with delivery, risk, and audit teams.
• Produce dashboards and metrics for leadership.

Skills

IGA

SailPoint

Entra ID

Active Directory

CyberArk

OAuth/OIDC

CIEM

Automation

Python

Security Analytics

Education

Bachelor's degree in CS/InfoSec or related field

Tools

Azure

AWS

GCP

SailPoint

Active Directory

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

The IAM Security Assurance Architect is responsible for reviewing all new applications, platforms, cloud services, and technology changes to ensure they meet the organisation's baseline IAM security requirements before they go live.

The role acts as the IAM security review authority within technology delivery and change processes, and builds the automation needed to provide continuous assurance that identity and access controls remain effective throughout the application lifecycle. The focus is on two outcomes: rigorous security reviews and automated, always-on assurance.

Key Responsibilities

1. IAM Security Reviews

• Serve as the IAM security review authority for new applications, technology platforms, cloud workloads, and infrastructure changes.
• Review designs and change requests through project lifecycle and design checkpoint governance processes.
• Assess and approve applications against baseline IAM security requirements, including: Authentication standards
• MFA requirements
• Privileged access controls
• Role-based access models
• Segregation of Duties requirements
• Identity lifecycle (joiner / mover / leaver) requirements
• Account provisioning and deprovisioning controls
• Service account and non-human identity management standards
• Federation and Single Sign-On requirements
• Review application access models, role structures, entitlement designs, and access matrices.
• Classify application criticality and confirm IAM onboarding requirements are met.
• Identify security risks, control gaps, and remediation actions, and confirm closure before deployment.
• Provide clear, documented review decisions and risk-based approvals to delivery teams.

2. Assurance Automation & Continuous Compliance

• Design and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements.
• Automate evidence collection and control checks to reduce manual review effort and provide always-on assurance.
• Establish automated, continuous monitoring for: Orphaned accounts
• Stale and dormant identities
• Excessive or unused privileges
• Toxic access combinations
• Service account and non-human identity risks
• Privileged account misuse
• Deviations from approved access baselines
• Integrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM).
• Define Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and IAM assurance health metrics.
• Build and maintain dashboards that surface control effectiveness and non-compliance for remediation.
• Drive an automate-first approach to control validation, minimising point-in-time manual checks.

3. Remediation, Risk & Reporting

• Track and drive closure of IAM security review findings and assurance exceptions.
• Review IAM-related risk assessments, exceptions, and remediation plans.
• Support internal and external audits with review evidence and assurance data.
• Report on review throughput, control coverage, and residual risk to IAM leadership.

4. Stakeholder Engagement

• Partner with application, engineering, cloud, and change teams to embed security-by-design in delivery.
• Advise project teams on how to meet baseline IAM requirements early in the lifecycle.
• Collaborate with Security, Risk, and Audit functions on assurance outcomes and control gaps.

Key Deliverables

• IAM Security Review Decisions & Risk-Based Approvals
• Baseline IAM Requirement Assessments for New Applications
• Continuous Assurance Automation & Control Validation Framework
• Automated Evidence Collection & Compliance Checks
• IAM Assurance Dashboards & Metrics (KRIs / KPIs)
• Review Findings, Remediation Tracking & Exception Reviews
• Assurance Reporting for IAM Leadership and Audit

Skills & Experience

Technical Expertise

• Identity Governance & Administration (IGA) – SailPoint ISC / IdentityIQ
• Microsoft Entra ID and Active Directory
• CyberArk Privileged Access Management
• Authentication & Federation Protocols (OIDC, OAuth 2.0, SAML)
• Cloud Identity Security and CIEM (Azure, AWS, GCP)
• Service Account and Non-Human Identity Management
• IAM Automation, Scripting and Orchestration (e.g., Power Automate, Python, APIs)
• Security Analytics, Monitoring and Continuous Assurance Tooling
• Baseline IAM Security Requirements and Control Testing

Review & Assurance Capability

• Security design review and change assessment processes
• Secure-by-design and baseline requirement validation
• Automated control testing and evidence collection
• Technology risk assessment and remediation tracking
• Metrics, KRI/KPI definition and assurance reportingAudit support and control effectiveness validation

Professional Experience

• Experience performing IAM or security design reviews for applications and platforms.
• Experience assessing applications against baseline IAM / access control requirements.
• Experience building automation for control validation, evidence collection, or continuous assurance.
• Experience integrating assurance checks with IAM and security tooling.
• Experience tracking and driving remediation of identity and access control gaps.
• Experience engaging with delivery, engineering, risk, and audit stakeholders.

Qualifications & Certifications

Experience

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience).
• 8+ years of overall experience in information security or IT, with 5+ years focused on Identity & Access Management.
• 3+ years performing IAM / security design reviews or control assurance for applications and platforms.
• Demonstrated hands-on experience building automation for control validation, evidence collection, or continuous assurance.

Preferred Certifications

• CISSP – Certified Information Systems Security Professional
• CISM – Certified Information Security Manager
• CIAM / Identity certifications (e.g., SailPoint, Okta, Microsoft Entra / Identity & Access Administrator SC-300)
• CyberArk Defender / Sentry (Privileged Access Management)
• Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft SC-100 / AZ-500, GCP Professional Cloud Security Engineer)
• CCSP – Certified Cloud Security Professional
• CISA – Certified Information Systems Auditor (for controls assurance and audit alignment)

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part‑time / fixed‑term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third‑party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.