IAM Lead - Access Services (APAC)

About the Role

Lead the access services team and manage the organization Identity and Access Management (IAM) operation services for APAC. Ensure secure & timely access to systems and resources. Collaborate with global teams, drive IAM projects and new initiatives towards success. What You'll Do

• Manage identity services related to accounts, roles, and access privileges.

• Oversee IAM & PAM administration, incidents and troubleshooting towards resolution.

• Lead IAM day-to-day operations, projects and deliveries with various stakeholders.

• Maintain functional documentation, support audits and review access controls.

• Provide IAM training and awareness to users and team members.

• Continuously improve enterprise IAM processes, adapt to business needs and technology changes. What We're Looking For

• Bachelor's Degree in Information Technology, Computer Science or related field.

• 5 years of experience in IT, InfoSec or IAM (certifications can substitute experience).

• Excellent communication, analytical thinking and problem-solving skills.

• Proven ability to lead projects and collaborate across teams.

• Preferred: CompTIA Security+, ISC2 CC, SSCP or ISACA Certifications

• Microsoft Certified: Azure Fundamentals AZ-900 or Security, Compliance and Identity Fundamentals SC-900 or Power Platform Fundamentals PL-900

• IAM Vendor-related courses (SailPoint Identity Security, ForgeRock, CyberArk, etc.)

• Deep knowledge of IAM concepts such as authentication, authorization, identity governance and access lifecycle management (Joiner-Mover-Leaver process).

• Knowledge of Privileged Access Management (PAM) for managing elevated access permissions

• Strong grasp of access control models such as RBAC, ABAC and Least Privileges.

• Familiarity with Multifactor Authentication (MFA) methods and Single Sign-On (SSO).

• Theoretical knowledge of SAML, OAuth, OpenID Connect & LDAP.

• Technical Skills: IAM & PAM Governance products (e.g., Oracle Identity Governance, SailPoint, CyberArk, Ping).

• Microsoft Active Directory & Microsoft Azure - Entra ID

• Scripting knowledge (PowerShell, Python) for IAM Automation Initiatives

• ITSM knowledge (Incident, Change Management) and tools (ServiceNow, BMC Helix, etc).

• Microsoft Power Platform to develop low-code solutions using Power BI, Power Apps and Power Automate.

• Proficiency in Microsoft 365 Apps for business (Outlook, Excel, etc) Nice to Have

• CompTIA Security+, ISC2 CC, SSCP or ISACA Certifications

• Microsoft Certified: Azure Fundamentals AZ-900 or Security, Compliance and Identity Fundamentals SC-900 or Power Platform Fundamentals PL-900

• IAM Vendor-related courses (SailPoint Identity Security, ForgeRock, CyberArk, etc.)