Identity and Access Control Manager

Derayah Financial; Riyadh; On-site; SAR 240,000 - 420,000; Full time

Job summary

Derayah Financial is seeking a Lead Enterprise IAM professional to own policies, lifecycle design, and audit readiness across IAM (IGA, MFA, SSO and PAM). You will supervise delivery, support access requests, provisioning, reviews, and incident response.

In this hands-on role you will establish the IAM operating model, define SLAs, drive the roadmap, and coordinate with internal teams and service partners to ensure secure, compliant identity and access management.

Qualifications

• Bachelor's degree in Information Technology or equivalent.
• 4–6 years of relevant professional experience in IAM/security.

Responsibilities

• Own IAM policies/standards and control objectives (JML, MFA, privileged access, access reviews, SoD).
• Establish the IAM operating model with RACI, risk acceptance and testing.
• Drive IAM roadmap and service workflows for requests and fulfilment.
• Lead identity lifecycle, access reviews, and certifications across RBAC/ABAC.
• Govern privileged access, vault controls, rotation, break-glass testing.

Skills

Arabic & English

IT & Cybersecurity knowledge

Strong communication skills

Microsoft Office

Education

Bachelor's degree in Information Technology

Tools

Microsoft Office

Job description

Lead enterprise IAM (IGA, MFA, SSO and PAM ) by defining controls and ensuring they're enforced in practice. Own policies, standards, lifecycle design, and audit readiness, while providing operational oversight (and hands-on support) so daily IAM delivery. access requests, provisioning, reviews, PAM, SSO/MFA onboarding, and incident support runs effectively through internal teams and/or service partners.

Duties & Responsibilities

• Own IAM policies/standards and control objectives (JML, MFA, privileged access, service accounts, access reviews, SoD, break-glass, logging/monitoring).
• Establish the IAM operating model (RACI, exceptions, risk acceptance, control testing) and service expectations (SLAs, support, escalation).
• Drive the IAM roadmap, service delivery workflows (request catalog/fulfillment), and continual improvement.
• Lead identity lifecycle and access review execution: role/entitlement model (RBAC/ABAC), certifications, remediation, orphan/leaver cleanup, and integration reliability (HR/ITSM/directories).
• Govern and oversee privileged access: onboarding standards, vault/session controls, rotation, break-glass testing, service/admin account lifecycle, and privileged-incident response support.
• Standardize and oversee SSO/MFA onboarding and operations: secure onboarding gates, federation stability, MFA enrollment/support, and authentication policy tuning with IT.
• Maintain runbooks/SOPs and partner with SOC/IR during incidents for rapid containment (revocations, investigations, evidence capture).
• Serve as the IAM focal point for audits and stakeholders; manage vendor/partner performance and reporting.

Education & Experience

• Bachelor's degree in Information Technology, or an equivalent discipline relevant to the role.
• 4-6 years of relevant professional experience in the related field.

Required Skills

• High level of Arabic and English both written and oral.
• Knowledge of IT & Cybersecurity
• High level of communication skills
• Expert in Microsoft Office such as PowerPoint and Excel