Manager - Identity & Access Management (IAM)

Raqami Islamic Digital Bank Ltd.; Karachi Division; On-site; PKR 3,000,000 - 6,000,000; Full time

Job summary

Raqami Islamic Digital Bank Ltd. is seeking a Manager for Identity & Access Management (IAM) to lead user access governance across banking apps, infrastructure, databases, and cloud platforms.

The role ensures access rights remain appropriate, auditable, and compliant with SBP, ISO/IEC 27001, PCI DSS and internal policies. The candidate will oversee RBAC, SoD, and PAM controls, coordinate with HR and system owners, and drive timely access reviews and remediation actions.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity or related field.
• Minimum 5 years in IAM, access governance, or information security.
• Hands-on with access reviews, RBAC, PAM, SoD, joiner-mover-leaver.

Responsibilities

• Lead user access administration and periodic reviews across apps, infra, DBs, and cloud.
• Ensure provisioning, modification, and de-provisioning follow approved processes and timelines.
• Review privileged, service, dormant, orphaned, and third-party accounts.
• Ensure RBAC, least privilege and SoD compliance.
• Oversee PAM controls: onboarding, approvals, and activity monitoring.
• Coordinate remediation of access control deficiencies with stakeholders.
• Maintain access matrices and remediation trackers.
• Prepare access review reports and escalate gaps.
• Support audits and regulatory assessments related to IAM.
• Ensure SBP, ISO/IEC 27001, PCI DSS and internal policies compliance.

Skills

RBAC

PAM

SoD

Joiner-Mover-Leaver

Azure AD

Okta

Ping Identity

AWS IAM

Access Reviews

Education

Bachelor in CS/IT

Master's degree preferred

Tools

Microsoft Entra ID (Azure AD)

Okta Workforce Identity Cloud

Ping Identity

AWS IAM/IAM Identity Center

Job description

Job Title: Manager - Identity & Access Management (IAM)

Department: Information Security

Job Overview

To lead and govern user access administration, access reviews, and privileged access management across banking applications, infrastructure, databases, and cloud platforms, ensuring that access rights remain appropriate, controlled, and auditable, and that the bank complies with SBP requirements, ISO/IEC 27001, PCI DSS, and Raqami’s internal Information Security policies.

Key Responsibilities

• Manage user access administration and periodic access reviews across banking applications, infrastructure, databases, and cloud platforms.
• Ensure user provisioning, modification, and de-provisioning (joiner-mover-leaver) are completed through approved processes and within defined timelines.
• Review privileged, service, dormant, orphaned, and third‑party accounts to ensure appropriate access.
• Ensure compliance with role‑based access control (RBAC), least privilege, and segregation of duties (SoD) requirements.
• Oversee PAM controls, including privileged account onboarding, access approvals, and activity monitoring.
• Coordinate with IT, HR, business departments, and system owners to remediate access control deficiencies.
• Maintain access matrices, review evidence, and remediation trackers.
• Prepare periodic access review reports and elevate overdue actions and significant control gaps.
• Support audits and regulatory assessments related to user access management.
• Ensure compliance with applicable SBP requirements, ISO/IEC 27001, PCI DSS, and internal Information Security policies.

Experience & Qualification Required

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or a related field, Masters degree will be preffered.
• Minimum 5 years of relevant experience in IAM, access governance, or information security, including hands‑on experience with user access reviews, RBAC, PAM, SoD, and joiner‑mover‑leaver processes.

Skills & Competencies

• Hands‑on experience with user access reviews, RBAC, PAM, SoD, and joiner‑mover‑leaver processes.
• Experience with IAM platforms, including Microsoft Entra ID (formerly Azure AD), Okta Workforce Identity Cloud, Ping Identity, and AWS IAM / IAM Identity Center.
• Strong expertise in PAM, including privileged account onboarding, access control, credential management, session monitoring, and periodic privileged access reviews.
• Knowledge of access control requirements across banking applications, infrastructure, databases, and cloud platforms.
• Working knowledge of SBP requirements, ISO/IEC 27001, PCI DSS, and internal Information Security policies, with experience supporting audits and regulatory assessments.
• Ability to maintain access matrices, review evidence, and remediation trackers, and to prepare access review reports and elevate overdue actions and control gaps.
• Strong stakeholder coordination, communication, analytical, and problem‑solving skills.

Raqami Bank is an equal opportunity employer. We welcome applications from all qualified individuals, including Persons with Disabilities (PWDs), and are committed to fostering an inclusive workplace where everyone has the opportunity to succeed.
Last date to apply: November 13, 2026.