[Hiring] IAM Continuous Assurance Manager @Experian

Role Description

As a leader within the Identity & Access Management (IAM) department of the Experian Global Security Office, you will lead a team responsible for evolving the IAM assurance model from periodic assessments to a continuous, risk-based monitoring approach across critical systems.

You will define the IAM assurance framework and reporting approach, with a particular focus on Identity Governance & Administration (IGA) and Privileged Access Management (PAM) controls, partnering with IAM Engineering teams to automate control testing, validations, and evidence collection.

You will work closely with control owners to investigate access-related risks, coordinate remediation activities, and improve control effectiveness. You will also coordinate assurance activities with Internal Audit, Risk Management, and Compliance teams, ensuring clear accountability and the appropriate level of independence.

By leveraging data, analytics, automation, and approved AI capabilities where appropriate, you will help expand monitoring coverage, identify issues earlier, strengthen compliance, and reduce manual effort. You will lead the IAM Assurance operating model and promote effective identity governance, privileged access controls, and continuous assurance practices across the organization.

Key Responsibilities

• Lead the design, implementation, and continuous improvement of IAM Continuous Assurance, including automated control monitoring, risk analysis, exception management, ongoing control validation, and assurance reporting.
• Establish and continuously assess assurance controls related to IGA and PAM, ensuring identity governance, privileged access, and supporting processes operate effectively and that control deficiencies are identified and remediated.
• Define and monitor controls related to identity lifecycle management, access requests and approvals, role-based access control, privileged access, segregation of duties, and periodic access reviews.
• Build repeatable testing and monitoring processes using IAM, HR, IT Service Management, directory, and application data; partner with IAM Engineering to automate control testing and evidence collection through analytics, workflow tools, and approved AI capabilities where appropriate.
• Serve as a subject matter expert in IGA and PAM assurance, including the evaluation of governance processes, technical controls, operational practices, exceptions, and control evidence.
• Identify inappropriate or excessive access, control failures, overdue access certifications, orphan accounts, policy exceptions, privileged access risks, and other identity-related risks; perform root cause analysis and coordinate remediation through to completion.
• Develop risk-based monitoring approaches focused on critical applications, privileged identities, high-risk access, control exceptions, and other material identity-related risks.
• Lead and develop the IAM Assurance team by setting clear objectives, priorities, and performance expectations while building capabilities in risk, controls, assurance, and data-driven decision making.
• Define and maintain the IAM Assurance operating model, ensuring clear accountability, appropriate independence, effective governance, and alignment with organizational frameworks.
• Provide technical and domain leadership in IAM governance, IGA, PAM, access control, and relevant frameworks such as ISO 27001; influence policies, standards, and best practices while remaining current on IAM technologies and industry trends.
• Partner with Internal Audit, Risk, Compliance, Technology, and business stakeholders; oversee relevant audit engagements, maintain IAM governance metrics and reporting, and support audit readiness and timely remediation efforts.

How Success Will Be Measured

• IAM control issues are identified early, assigned to clear owners, and resolved within agreed timelines.
• The effectiveness of IGA and PAM controls is measurable, with increasing automation of monitoring for critical and high-risk controls.
• Access reviews are completed on time with reliable evidence and proper exception management.
• Privileged access risks and exceptions are identified through repeatable monitoring processes and managed through defined remediation procedures.
• Monitoring coverage extends across critical systems and high-risk access, with a continuous reduction in manual gaps.
• Audit requests are supported by complete, consistent, and traceable evidence.
• Leadership receives timely reporting that enables effective understanding and management of IAM risks.
• Control improvements reduce recurring findings, unnecessary access, and avoidable exceptions.

Qualifications

• Proven Experience and/or Knowledge In:
• Advanced English;
• Experience in IAM, security assurance, IT risk, audit, or a related discipline, including experience leading teams or programs. People management experience is strongly preferred.
• Experience designing, implementing, or operating Continuous Assurance, Continuous Controls Monitoring (CCM), automated compliance monitoring, or data-driven assurance programs.
• Strong hands-on or governance experience in Identity Governance and Administration (IGA), including joiner/mover/leaver processes, access certifications, role-based access control, privileged access, and segregation of duties.
• Strong knowledge of Privileged Access Management (PAM), including privileged account discovery and onboarding, credential management, access approvals, privileged session controls, least privilege principles, and reducing standing privileged access.
• Experience assessing the design and operational effectiveness of IGA and PAM controls, identifying control gaps, and translating findings into sustainable corrective actions.
• Experience with IAM platforms such as SailPoint, Okta, CyberArk, AWS, or Microsoft Entra ID, or equivalent technologies.
• Knowledge of security and risk management frameworks such as ISO 27001, NIST, PCI DSS, and Zero Trust, with the ability to translate requirements into effective IAM controls.
• Experience managing assurance or audit activities, with a strong understanding of accountability, independence, constructive challenge, and remediation practices.
• Ability to analyze identity and access data to identify exceptions, trends, and control weaknesses; experience with SQL, scripting, or reporting tools is considered an advantage.

Desired Skills

• Experience implementing, operating, or providing assurance over SailPoint and CyberArk environments is highly desirable.
• Experience using automation, analytics, workflow tools, or RPA to improve assurance processes; familiarity with approved AI or GenAI use cases is an advantage.
• Experience defining KRIs, KPIs, control health metrics, exception reporting, and executive IAM risk reporting is considered a plus.
• Strong communication, project management, and stakeholder management skills, including the ability to provide constructive challenge and explain risk to diverse audiences.
• CISSP, CISM, or other relevant cybersecurity certifications are considered an advantage.

Additional Information

A Serasa Experian é muito mais do que você imagina. Com o propósito de criar um futuro melhor, ampliando oportunidades para pessoas e empresas, no Brasil somos mais de 4 mil pessoas que atuam em diversos times e especialidades. Aqui, cada conhecimento e diversidade se complementa e você pode trabalhar no que mais ama, estamos comprometidos a construir uma cultura inclusiva e um ambiente no qual pessoas possam equilibrar a carreira com seus compromissos e interesses pessoais, prezando pelo bem-estar.

A gente se dedica muito em ser uma das melhores e mais inovadoras empresas para se trabalhar do país, possibilitando experiências e carreiras incríveis para nossas pessoas. Nossa forte abordagem de pessoas em primeiro lugar é reconhecida externamente por meio de diversas certificações de mercado: fomos premiados pelo Great Place To Work™ em 24 países e pela certificação internacional Top Employers, além de sermos reconhecidos como uma das melhores empresas para jovens profissionais e contarmos com uma avaliação de 4,6 no Glassdoor. Cada reconhecimento nos indica que estamos no caminho certo, proporcionando um ambiente de trabalho cada vez melhor para nossos talentos.

Employee Status

• Regular
• Role Type: Home
• Department: Information Security
• Schedule: Full Time