Manager - Identity & Access Management

Grant Thornton INDUS; Hyderabad; Hybrid; INR 2,000,000 - 3,600,000; Full time

Job summary

GT Advisors’ Cybersecurity practice is seeking an IAM Manager to lead advisory, governance, transformation, and implementation engagements. You will work with clients to improve identity governance, strengthen access controls, and implement scalable IAM solutions across enterprise environments.

Responsibilities include leading workstreams, coordinating delivery teams, and developing client-ready deliverables while supporting practice growth initiatives.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field required.

Responsibilities

• Manage IAM advisory, governance, transformation, and implementation engagements for clients.
• Lead IAM program assessments, roadmaps, and operating model design.
• Support IGA deployment including SailPoint, Saviynt, and Microsoft Entra solutions.
• Drive RBAC, SoD, and access governance initiatives across enterprise environments.
• Assist clients with cloud identity modernization and governance.
• Oversee engagement management, team leadership, and client relationships.
• Maintain knowledge of IAM trends, regulatory requirements, and industry practices.

Skills

IAM governance

IAM advisory

Project leadership

Client engagement

RBAC

SoD

UAR

Cloud identity

Microsoft Entra

Education

Bachelor's degree in IT, Cybersecurity, CS, or related field

CISSP

CISM

CRISC

SailPoint

Saviynt

Microsoft Entra SC-300/SC-100

Tools

SailPoint IdentityIQ

SailPoint Identity Security Cloud

Saviynt Enterprise Identity Cloud

Microsoft Entra

Active Directory

ServiceNow

SAP Security/GRC

Pathlock

SCIM

REST APIs

Job description

The professionals in GT Advisors’ Cybersecurity practice help organizations build Identity and Access Management (IAM) strategy into their overall business and cybersecurity strategy. This includes supporting clients in assessing IAM program maturity, defining IAM target-state operating models, establishing governance frameworks, implementing Identity Governance & Administration (IGA) solutions, and strengthening access governance controls across enterprise environments.

GT Advisors’ IAM practice helps organizations modernize identity programs through strategic advisory, roadmap development, governance enhancements, cloud identity transformation, role-based access control (RBAC), segregation of duties (SoD), user access review (UAR) programs, and implementation of leading IAM technologies including SailPoint, Saviynt, and Microsoft Entra.

As a Manager within the Cybersecurity practice, you will support and manage the delivery of IAM advisory, governance, transformation, and implementation engagements. You will work closely with clients to improve identity governance, strengthen access controls, and implement scalable IAM solutions that align with business and security objectives.

The Manager role offers an excellent opportunity to combine IAM subject matter expertise with project leadership responsibilities. You will lead workstreams, manage delivery teams, coordinate client activities, develop client-ready deliverables, and support practice growth initiatives.

Responsibilities:

IAM Advisory & Transformation

• Manage and perform IAM assessments, including IAM maturity assessments, governance reviews, operating model evaluations, access governance assessments, and IAM roadmap development initiatives.
• Support IAM strategy and transformation programs focused on identity modernization, governance enhancement, and cloud identity adoption.
• Conduct IAM architecture reviews and contribute to future-state IAM design initiatives.
• Develop findings, recommendations, roadmaps, and executive-ready deliverables for client stakeholders.

Identity Governance & Administration (IGA)

• Support implementation and optimization of SailPoint, Saviynt, and Microsoft Entra solutions.
• Design and implement Identity Governance & Administration (IGA) capabilities, including identity lifecycle management, provisioning, access requests, certifications, and access governance processes.
• Support Identity Lifecycle Management (Joiner, Mover, Leaver) process design and optimization.
• Assist clients in improving access governance processes and operational effectiveness.

RBAC, SoD & Access Governance

• Support Role-Based Access Control (RBAC) and role engineering initiatives, including role mining, role rationalization, and entitlement governance.
• Support Segregation of Duties (SoD) governance, risk assessment, mitigation, and remediation efforts across enterprise applications.
• Support User Access Review (UAR) and access certification programs, including process assessments, optimization initiatives, and control enhancements.
• Develop access governance policies, standards, procedures, and governance documentation.

Microsoft Entra & Cloud Identity

• Support Microsoft Entra governance initiatives including:
• Single Sign-On (SSO)
• Conditional Access
• Identity Governance
• Privileged Identity Management (PIM)
• External Identities
• Assist clients with cloud identity modernization and identity security initiatives.

Compliance, Audit & Risk

• Support IAM compliance, audit readiness, control assessments, and remediation activities aligned to SOX, NIST, ISO 27001, and other regulatory requirements.
• Assist clients in evaluating and strengthening IAM controls across people, processes, and technologies.
• Support risk assessment activities and development of remediation recommendations.

Engagement Management & Team Leadership

• Manage assigned workstreams from planning through execution, including project tracking, issue management, status reporting, and quality review.
• Coordinate activities across consultants and senior consultants while providing coaching, mentoring, and performance guidance.
• Collaborate with client stakeholders including security, risk, compliance, infrastructure, application, and business teams.
• Support proposal development, Statements of Work (SOWs), solutioning activities, and business development initiatives.
• Develop and maintain strong client relationships with a focus on delivering exceptional service.
• Remain current on IAM industry trends, emerging technologies, cybersecurity risks, and regulatory requirements.
• Adhere to the highest degree of professional standards and strict client confidentiality.
• Other duties as assigned.

Education & Experience:

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field required.
• 8+ years of IAM, cybersecurity, technology risk, or related consulting experience.
• 4+ years of experience leading IAM workstreams, project teams, or client delivery activities.
• Professional certifications such as CISSP, CISM, CRISC, SailPoint, Saviynt, Microsoft Entra (SC-300/SC-100), or other relevant certifications preferred.
• Hands-on experience with one or more of the following technologies:
• SailPoint IdentityIQ
• SailPoint Identity Security Cloud (ISC)
• Saviynt Enterprise Identity Cloud

IAM Functional Experience

Experience supporting one or more of the following areas:

• IAM Strategy and Roadmap Development
• IAM Governance and Operating Model Design
• Identity Governance & Administration (IGA)
• Identity Lifecycle Management (Joiner, Mover, Leaver)
• Role-Based Access Control (RBAC)
• Role Mining and Entitlement Rationalization
• Segregation of Duties (SoD)
• User Access Reviews (UAR)
• Access Certifications
• Access Governance Programs
• Microsoft Entra Governance and Security Solutions
• IAM Modernization and Cloud Identity Transformation

Technical & Industry Knowledge

• Working knowledge of IAM industry-leading practices and frameworks including:
• NIST Cybersecurity Framework (CSF)
• NIST 800-53
• ISO 27001 / ISO 27002
• CIS Controls
• SOX ITGC
• Zero Trust Security Principles
• Experience integrating IAM solutions with:
• ERP Applications
• HR Systems
• Enterprise Applications
• Directory Services
• Experience with technologies such as Active Directory, ServiceNow, SAP Security/GRC, Salesforce, CyberArk, Delinea, Pathlock, SCIM, and REST APIs preferred.