Senior Identity, Authentication, Authorization & Governance Analyst

Job Description

Responsibilities

• Shape IAM business requirements for enterprise authentication and authorization, helping to guide future direction across the organisation.
• Ensure AI systems, agents, and services comply with IAM standards, internal policies, and applicable regulatory and audit requirements.
• Oversee identity and access controls across private cloud, SaaS, and hybrid environments.
• Guide the adoption of modern access models such as zero trust, conditional access, and least privilege.
• Establish and govern API authentication and authorization standards across the enterprise.
• Ensure APIs are protected using consistent, secure identity patterns (token-based access, service authentication, least privilege).
• Partner closely with application, platform, and integration teams to embed IAM controls into API design and development lifecycles.
• Oversee risk management, metrics, and reporting related to API access and service identities.
• Partner with governance teams to ensure IAM requirements are defined, measured, reported, and enforced.
• Ensure compliance with internal policies and external regulatory and audit requirements.
• Provide executive-level reporting on identity risks, control gaps, and remediation progress.
• Support audit engagements, issue remediation, and sustainable control design.
• Build partnerships across GIS, Core Technology, Application Development, Risk, Compliance, Audit, and Third-Party Management.
• Influence solution design and drive adoption through credibility, collaboration, and strong stakeholder engagement.
• Clearly communicate risks, decisions, and tradeoffs to both technical and non-technical audiences.
• Drive alignment across teams operating at different speeds and maturity levels.

Requirements

• Experience in identity and access management within large, complex organisations, ideally in financial services or similarly regulated environments.
• Demonstrated success leading or influencing enterprise-scale IAM programs.
• Deep expertise in authentication and authorization technologies and standards, including: OAuth 2.0, OpenID Connect, SAML, WS-Federation LDAP, Kerberos, RADIUS
• Experience with IAM platforms such as Active Directory, Entra ID (Azure AD), Ping, or equivalent.
• Experience supporting or governing identity and access in cloud environments.
• Deep understanding of API security and identity patterns, including service-to-service access and token-based authentication.
• Understanding of AI identity and access patterns, API authentication, AI/ML authorisation models, and NIST-aligned governance.
• Experience aligning IAM controls with application and platform engineering teams.
• Understanding of identity risk within regulated environments.
• Familiarity with frameworks and regulations such as NIST, ISO, FFIEC, SOX, and SOC.
• Proven ability to interpret policy and regulatory requirements and translate them into practical controls.