Lead IAM Emerging Identity Security

About the Company

Responsibilities

• ● Own the emerging identity security strategy and roadmap for IAM Authorisation.
• ● Assess identity and access risk arising from AI, Agentic AI, machine actors, autonomous systems, digital assets and future trust models.
• ● Translate emerging technology risk into practical Authorisation control patterns, standards and guardrails.
• ● Define reusable control expectations for emerging identity use cases before fragmented local solutions become embedded.
• ● Maintain visibility of emerging identity security debt, capability gaps and future control requirements.
• ● Convert horizon scanning, risk signals and technology change into IAM requirements, investment priorities and engineering outcomes.
• ● Provide input into Authorisation strategy, design and investment planning.
• ● Challenge unclear ownership, unmanaged access risk and one-off control responses where they may create systemic exposure.
• ● Establish the forward-looking identity security strategy for emerging identity types and trust models.
• ● Ensure IAM capability roadmaps reflect future identity and access requirements across AI, Agentic AI, NHI, autonomous systems and digital assets.
• ● Develop reusable Authorisation control patterns that can be applied across emerging technology domains.
• ● Shape Authorisation design and investment planning by converting ambiguity into clear capability requirements.
• ● Partner with Enterprise Security Architecture, Technology, Risk and Cyber stakeholders to ensure emerging identity risks are understood early and translated into executable outcomes.
• ● Prevent fragmented, one-off control responses by promoting common standards, patterns and guardrails.
• ● Act as a trusted advisor to IAM, Technology, Risk, Cyber and Architecture stakeholders on emerging identity and access risk.
• ● Help business and technology teams understand identity implications of new technology patterns before they scale.
• ● Provide clear, practical guidance on control expectations for AI, Agentic AI, NHI, autonomous systems and digital asset access patterns.
• ● Support prioritisation decisions where future identity risk, control debt and capability uplift compete for capacity.
• ● Translate emerging risks into business-relevant implications, practical Authorisation outcomes and senior stakeholder messaging.
• ● Engage with third-party vendors and industry sources where needed to inform capability direction, without becoming a vendor delivery manager.
• ● Establish mechanisms for horizon scanning across technology, threat, regulatory and industry developments relevant to identity and access.
• ● Define practical processes for assessing emerging identity risk and converting findings into Authorisation requirements.
• ● Maintain visibility of emerging identity security debt, unresolved ownership questions and capability gaps.
• ● Ensure standards, guardrails and control patterns remain proportionate, reusable and aligned to IAM Authorisation outcomes.
• ● Feed emerging identity requirements into engineering, architecture and investment planning processes.
• ● Maintain evidence of risk assessments, design rationale, accepted trade-offs and agreed remediation actions where required.
• ● Operate as a strategic security thinker and capability builder, not as a technology follower.
• ● Influence senior stakeholders and engineering teams through evidence, clarity and practical control reasoning.
• ● Coach teams on how emerging technology changes identity, privilege, trust and access risk.
• ● Build common understanding of reusable emerging identity control patterns across IAM and adjacent technology teams.
• ● Challenge assumptions constructively where new technology creates unclear ownership, unmanaged access risk or weak control accountability.
• ● Support capability development by identifying skills, knowledge and maturity gaps relevant to future identity security.
• ● Identify emerging identity and authorisation risks before they become systemic control issues.
• ● Assess risk from immature or evolving technology patterns where standards, ownership or industry practices remain unclear.
• ● Ensure AI, Agentic AI, NHI, autonomous system and digital asset access patterns have clear control expectations.
• ● Escalate material emerging identity risk, control gaps and ownership ambiguity through appropriate IAM, ICS and risk pathways.
• ● Challenge local optimisation where it creates enterprise-level Authorisation, privilege or access risk.
• ● Ensure evidence-based judgement is applied to risk assessments, control pattern design and capability prioritisation.
• ● Maintain traceable evidence of key decisions, residual risks, accepted debt and remediation commitments.
• ● Embed emerging identity security standards and guardrails into existing IAM, ICS, Architecture and delivery governance pathways.

Benefits

• ● Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• ● Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• ● Flexible working options based around home and office locations, with flexible working patterns.
• ● Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• ● A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• ● Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.