Head of Access Management Control

Location
United Arab Emirates

About
Role Purpose: To lead, govern, and continuously enhance the Access Management Control framework across the bank by driving robust Identity Access Management (IDAM) practices, strengthening Segregation of Duties (SoD), and embedding automation, enhancing controls, and governance standards. The role ensures effective stakeholder engagement, regulatory compliance, and optimization of access lifecycle processes across UAE and international operations.

Responsibilities

• Work with stakeholders in enhancing access management processes, controls and onboarding new applications in Identity Access Management tool (IDAM) and enhance the reviews process, SOD and implement Role Mining as per standard matrices.
• Advise and support business units in establishing and maintaining adequate Role-Based Access profiles across their operating systems in the company UAE and international expansion.
• Supervise review of user's definition and systems access processes including setting up new applications, applying change requests of parameterization/configuration, creating new profiles or groups, and maintaining the existing profiles, groups, privileges/access rights, and users.

Key Accountabilities

• Establish and continuously enhance the Access Management Governance Framework, aligned with regulatory expectations and internal policies.
• Ensure effective implementation of Segregation of Duties (SoD) and principle of least privilege across all systems.
• Drive closure of audit findings, regulatory observations, and control gaps related to IAM.
• Oversee end-to-end User Access Management (UAM) operations, including access provisioning, modification, and revocation.

Requirements

• 12–15 years of progressive experience in Access Management, Identity & Access Management (IAM), and IT Controls, preferably within banking or financial services.
• Proven experience in leading enterprise-wide Access Management or IAM functions, including governance, control design, and operational oversight.
• Strong expertise in Identity & Access Management (IAM / IDAM) frameworks, including user lifecycle management (Joiner–Mover–Leaver), role-based access control (RBAC), and identity governance.