Head of Identity and Access Management

The role

Every login, every customer authentication, every privileged access request runs through the architecture you design, from a blank page. You're building both sides of identity at once, the customer-facing experience that has to feel invisible and secure at the same time, and the workforce controls that keep the bank's critical infrastructure locked down. Get it right, and identity becomes the thing nobody thinks about because it just works, safely, every time.

What you'll do

Design and build the enterprise IAM and CIAM framework entirely from scratch, defining modern identity lifecycle workflows, authentication standards, and authorization models

Partner with the product team to architect secure, high-availability, low-friction consumer authentication experiences, including multi-factor authentication, biometric integration, and passwordless options, balancing rigorous bank security with a seamless digital banking experience

Implement robust workforce identity controls, single sign-on (SSO), enterprise directory services, and automated privileged access management (PAM) workflows to protect critical infrastructure and cloud environments

Partner with cloud security and network engineering to enforce continuous identity verification, least-privilege access, and conditional access policies across cloud-native microservices

Automate user provisioning, de-provisioning, and role-based access control (RBAC) to eliminate identity sprawl and streamline internal HR-to-IT workflows

Establish regular access recertification campaigns, audit logging, and reporting mechanisms to satisfy internal reviews and regulatory examinations

What we're looking for

10+ years of cumulative IT and information security experience, including 4 to 5 years specializing in IAM, CIAM, and PAM architecture and leadership within banking, financial services, or advanced fintech environments

Hands-on expertise with modern identity protocols (OIDC, OAuth 2.0, SAML), cloud identity providers (e.g., Azure AD/Entra ID, Okta, Ping Identity), and modern CIAM architectures

Solid understanding of Central Bank cybersecurity circulars, authentication requirements, and data privacy guidelines

Professional credentials such as CISSP, Certified Identity and Access Manager (CIAM), or vendor-specific expert certifications are strongly preferred

A builder mindset, thriving in a fast-paced, from-scratch environment, able to balance extreme security rigor for financial data with rapid, agile product delivery

Excellent cross-functional collaboration skills, bridging product engineering, security operations, and executive stakeholders

You’ll thrive here if you

You'd rather architect identity from first principles than patch together an inherited mess of directories and permissions

You believe a login should feel effortless to the customer and be uncompromising underneath

You treat least-privilege access as a default, not an exception you get to when there's time

You can translate an identity architecture decision into something both a regulator and a product team understand

You want to build the layer that every other system in the bank ultimately trusts