Assistant Vice President, IAM Governance

Assistant Vice President, IAM Governance

As an Identity and Access Management Governance Manager, you will play an essential role in overseeing risk management frameworks related to identity and access controls. Your day-to-day responsibilities will involve collaborating with various teams to define robust controls, developing monitoring strategies that provide transparency into performance metrics, coordinating remediation efforts across business units, and preparing detailed reports for governance meetings. You will also facilitate stakeholder engagement in managing toxic combinations within applications, act as a liaison for audit-related activities, address risks within development lifecycles, and ensure that all participants adhere to established standards. Success in this role requires you to be highly organised, delivery-focused, adept at simplifying complex concepts for both technical and non-technical audiences, and able to foster partnerships across diverse groups. Your ability to communicate clearly, build consensus among stakeholders, and maintain meticulous attention to detail will be crucial as you help drive continuous improvement in IAM governance.

• Work closely with the wider Identity and Access Management (IAM) team and other control functions to define key controls for IAM processes, ensuring alignment with audit and regulatory requirements.

• Design effective strategies for continuous control monitoring by developing Key Control Indicators (KCIs) and Key Risk Indicators (KRIs) that assess performance across IAM controls.

• Assist in creating formal testing strategies for IAM controls, collaborating with technical teams to ensure thorough evaluation and remediation.

• Monitor progress on remediation initiatives by partnering with technology and business application owners to ensure commitments are met throughout the programme lifecycle.

• Coordinate the Toxic Combination framework by facilitating full participation from business and technology stakeholders, ensuring violations are managed appropriately.

• Prepare comprehensive management information reports for IAM Governance meetings, transparently communicating process performance and escalating issues as needed.

• Act as a point of contact for addressing IAM risks within the Software Development Lifecycle (SDLC), ensuring risks are mitigated effectively.

• Engage proactively with internal and external audit teams regarding identity and access management risks, providing clear communication and documentation.

• Support the design and delivery of remediation programmes to ensure key risks are addressed efficiently while maintaining compliance with industry standards.

• Facilitate clear communication between organisational functions, business units, and offices both locally and internationally to promote understanding of IAM governance.

What you bring:

Your proven track record in identity and access management within financial services will enable you to bring valuable insights into risk mitigation strategies. You possess deep familiarity with regulatory expectations around technology risk—including audit cycles—and have demonstrated your ability to leverage best practice frameworks like NIST or SOX. Your experience spans both technical competencies (such as developing monitoring indicators or automating data production) as well as interpersonal skills: you excel at building relationships across business units, facilitating clear communication between local and international teams, and presenting complex information concisely. As someone who thrives in collaborative environments, your attention to detail ensures accurate reporting while your strategic thinking helps drive continuous improvement. Your educational background supports your technical expertise; professional certifications further enhance your credibility. Above all, your commitment to fairness, transparency, empathy towards colleagues’ perspectives, dependability under pressure, sensitivity when delivering difficult messages—and enthusiasm for sharing knowledge—will set you apart as an ideal candidate for this position.

• Demonstrable experience within an Identity and Access Management function in a regulated financial services environment is essential for success in this role.

• At least three years’ experience in technology-focused risk or control functions provides you with the foundation needed to understand complex operational challenges.

• Working knowledge of banking or securities products enables credible engagement with application owners on topics such as toxic combinations or segregation of duties.

• Proven understanding of Information Security and Technology Risk management practices ensures you can apply these domains effectively within financial institutions.

• Strong technical knowledge of external laws, regulations (including SOX), policies, frameworks such as NIST or DORA relevant to technology risk is required.

• Experience developing continuous control monitoring strategies—including automation of reporting—demonstrates your commitment to efficiency.

• Ability to develop effective control testing strategies shows your skill in evaluating risk mitigation measures thoroughly.

• Excellent written and verbal communication skills allow you to simplify complex concepts for diverse audiences.

• Educated to degree level; CISSP or CISM qualifications are desirable but not mandatory.

• Meticulous attention to detail combined with strong organisational skills ensures accuracy in reporting and process oversight.

What sets this company apart:

This organisation stands out as one of the world’s most respected financial institutions thanks to its long-standing commitment to integrity, responsibility, fairness, transparency, honesty—and shared growth. Employees benefit from being part of an international network spanning over 50 countries; this global reach creates unique opportunities for personal development through cross-border collaboration. The company’s vision centres on nurturing talent: it invests heavily in training opportunities so individuals can stretch themselves professionally while enjoying flexible working arrangements that support work-life balance. The culture is inclusive—valuing diversity of thought—and supportive leadership.