SL2470 - Identity & Access Management Operations

FPT Asia Pacific Pte Ltd; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

FPT Asia Pacific Pte Ltd is seeking a Senior Identity & Access Management (IAM) leader to drive enterprise IAM operations, strategy, and transformation. You will own platforms across System Access, PAM, and IGA, oversee governance, risk, and regulatory compliance, and push automation for scalable identity governance.

The role requires deep expertise in CyberArk, Saviynt, AD, and cloud integrations. You will lead cross-functional teams, manage vendors, and partner with executives to deliver a

Qualifications

• 12+ years in IT, cybersecurity, IAM, or related fields.
• 8+ years direct IAM experience across System Access, PAM, IGA, and lifecycle management.
• 5+ years leadership managing IAM teams, vendors, or MSPs.
• Experience in regulated environments (financial services, insurance, banking).
• Leading IAM transformation, modernization and automation initiatives.
• Strong knowledge of JML processes and identity lifecycle management.
• Understanding of RBAC, ABAC, and SoD.
• Experience with access certification and governance.
• Knowledge of human and machine identities and secret management.
• Hands-on with CyberArk, Saviynt, AD, Entra ID and integrations.
• Knowledge of SAML, OAuth 2.0, OIDC, LDAP, and SCIM.
• Experience contributing to IAM solutioning and entitlement modelling.
• Experience supporting MAS TRM, FSM-N04, audits.

Responsibilities

• Lead IAM operations and strategy across System Access, PAM, and IGA.
• Oversee 24x7 IAM operations and incident management.
• Manage IAM vendors and MSPs for performance and delivery.
• Drive automation across IAM processes and identity governance.
• Ensure compliance with security policies and standards.
• Own PAM operations including CyberArk onboarding and secret management.
• Manage Saviynt-based IGA and HR-to-AD integration.
• Drive onboarding of applications into Saviynt as IAM programs expand.
• Support access certification, recertification, and SoD controls.
• Define IAM architecture and solution designs for cloud, on‑prem, and SaaS.
• Lead strategy and governance with multi-year transformation roadmaps.
• Oversee audit activities and remediation for IAM programs.
• Manage IAM budgets, vendor contracts, and executive reporting.

Skills

IAM leadership

JML ownership

Regulatory compliance

Vendor management

Automation & transformation

Identity governance

Identity lifecycle management

Education

Bachelor's degree in CS/IS/Engineering

CISSP

CISM

CyberArk/Saviynt IAM certifications

Tools

CyberArk

Saviynt

Active Directory

Entra ID

Job description

Role Overview

We are seeking a senior Identity & Access Management (IAM) professional to lead enterprise IAM operations and strategy across System Access Management, Privileged Access Management (PAM), and Identity Governance & Administration (IGA).

The role combines operational leadership, technical ownership, governance, risk management, and strategic transformation. The successful candidate will oversee IAM platforms and operations while driving automation, identity governance, regulatory compliance, and the organisation's long-term IAM roadmap.

Key Responsibilities

IAM Operations & Leadership

• Lead System Access Operations teams responsible for user provisioning, deprovisioning, and end-to-end Joiner, Mover, and Leaver (JML) processes.
• Manage 24x7 IAM operations and ensure appropriate service availability, operational performance, and incident management.
• Manage IAM vendors and managed service providers, including service performance and delivery.
• Drive continuous improvement and automation across IAM operational processes.
• Promote strong identity hygiene and compliance with information security policies and standards.

Privileged Access Management (PAM)

• Lead PAM operations, including onboarding systems and applications into CyberArk.
• Manage privileged credentials, privileged sessions, and break-glass access processes.
• Provide technical ownership and operational support for the CyberArk platform.
• Ensure privileged access follows least-privilege, security, governance, and audit requirements.
• Support secret management and privileged identity governance across enterprise environments.

Identity Governance & Administration (IGA)

• Provide technical ownership and operational support for the Saviynt platform.
• Manage IGA operations, including HR-to-Active Directory integration and birthright access provisioning.
• Drive the onboarding of applications into Saviynt as the IGA programme and automation coverage expand.
• Support access certification, recertification, entitlement governance, and Segregation of Duties (SoD) controls.
• Improve automation across identity lifecycle and access governance processes.

IAM Architecture & Solutioning

• Participate in IAM solution design for new applications, platforms, and digital initiatives.
• Contribute to entitlement design, role engineering, identity lifecycle management, and access model design.
• Review and challenge application roles and entitlement models to ensure least-privilege principles are maintained.
• Design and govern Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
• Support identity integrations across on-premises, cloud, and SaaS environments.
• Apply identity standards and protocols including SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, and SCIM.

Strategy, Governance & Transformation

• Define and own the enterprise IAM strategy, operating model, and multi-year transformation roadmap.
• Drive IAM transformation, modernisation, and automation initiatives across System Access Management, PAM, and IGA.
• Establish IAM standards, policies, controls, and governance frameworks across on-premises, cloud, and SaaS environments.
• Act as the technology risk owner for IAM platforms and services, ensuring risks are identified, assessed, mitigated, and appropriately reported.
• Lead IAM resilience planning, including disaster recovery, business continuity, and cyber recovery capabilities.
• Drive organisational capability through succession planning, talent development, and leadership coaching within the IAM function.

Audit, Risk & Compliance

• Lead IAM-related internal and external audit activities.
• Provide audit evidence and manage remediation activities through to closure.
• Ensure IAM operations comply with applicable regulatory requirements, internal policies, and industry best practices.
• Support compliance with requirements including MAS Technology Risk Management (TRM) guidelines and FSM-N04 Cyber Hygiene requirements.
• Monitor IAM risks, control effectiveness, audit findings, and remediation progress.

Financial & Executive Management

• Own IAM financial planning, including budget management, vendor contracts, licence optimisation, and investment prioritisation.
• Provide executive reporting on IAM operational health, risk posture, audit status, transformation progress, and strategic initiatives.
• Engage senior technology, cybersecurity, risk, and governance stakeholders on IAM strategy and operational priorities.

Requirements

• Minimum 12 years of experience in Information Technology, Cybersecurity, Identity & Access Management, or related disciplines.
• Minimum 8 years of direct experience across IAM domains, including System Access Management, PAM, IGA, and Identity Lifecycle Management.
• Minimum 5 years of leadership experience managing IAM teams, vendors, or managed service providers.
• Proven experience managing enterprise IAM operations within highly regulated environments such as financial services, insurance, or banking.
• Demonstrated experience leading IAM transformation, modernisation, and automation initiatives.
• Strong experience with Joiner, Mover, and Leaver (JML) processes and identity lifecycle management.
• Strong understanding of birthright access, enterprise roles, role hierarchies, entitlements, and fine-grained permissions.
• Strong knowledge of Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Segregation of Duties (SoD).
• Experience with access certification, recertification, and access governance.
• Understanding of human and machine identities, secret management, and Privileged Access Management.
• Hands-on experience with CyberArk, Saviynt, Active Directory, Entra ID, and identity integrations.
• Good understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, and SCIM.
• Experience contributing to IAM solutioning, role engineering, entitlement modelling, and access governance design.
• Experience supporting regulatory and audit requirements, including MAS TRM, FSM-N04, internal audits, and external audits.
• Strong leadership, stakeholder management, communication, and decision-making capabilities.

Education & Certifications

• Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related discipline.
• Professional certifications such as CISSP or CISM are highly desirable.
• CyberArk, Saviynt, or other relevant IAM certifications are highly desirable.