Authentication standards
MFA requirements
Privileged access controls
Role-based access models
Segregation of Duties requirements
Identity lifecycle (joiner / mover / leaver) requirements
Account provisioning and deprovisioning controls
Service account and non-human identity management standards
Federation and Single Sign-On requirements
Review application access models, role structures, entitlement designs, and access matrices.
Classify application criticality and confirm IAM onboarding requirements are met.
Identify security risks, control gaps, and remediation actions, and confirm closure before deployment.
Provide clear, documented review decisions and risk-based approvals to delivery teams.
2. Assurance Automation & Continuous Compliance
Design and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements.
Automate evidence collection and control checks to reduce manual review effort and provide always-on assurance.
Establish automated, continuous monitoring for
Orphaned accounts
Stale and dormant identities
Excessive or unused privileges
Toxic access combinations
Service account and non-human identity risks
Privileged account misuse
Deviations from approved access baselines
Integrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM).
Define Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and IAM assurance health metrics.
Build and maintain dashboards that surface control effectiveness and non-compliance for remediation.
Drive an automate-first approach to control validation, minimising point-in-time manual checks.
3. Remediation, Risk & Reporting
Track and drive closure of IAM security review findings and assurance exceptions.
Review IAM-related risk assessments, exceptions, and remediation plans.
Support internal and external audits with review evidence and assurance data.
Report on review throughput, control coverage, and residual risk to IAM leadership.
4. Stakeholder Engagement
Partner with application, engineering, cloud, and change teams to embed security-by-design in delivery.
Advise project teams on how to meet baseline IAM requirements early in the lifecycle.
Collaborate with Security, Risk, and Audit functions on assurance outcomes and control gaps.
Key Deliverables
IAM Security Review Decisions & Risk-Based Approvals
Baseline IAM Requirement Assessments for New Applications
Continuous Assurance Automation & Control Validation Framework
Automated Evidence Collection & Compliance Checks
IAM Assurance Dashboards & Metrics (KRIs / KPIs)
Review Findings, Remediation Tracking & Exception Reviews
Assurance Reporting for IAM Leadership and Audit
Skills & Experience
Technical Expertise
Identity Governance & Administration (IGA) – SailPoint ISC / IdentityIQ
Microsoft Entra ID and Active Directory
CyberArk Privileged Access Management
Authentication & Federation Protocols (OIDC, OAuth 2.0, SAML)
Cloud Identity Security and CIEM (Azure, AWS, GCP)
Service Account and Non-Human Identity Management
IAM Automation, Scripting and Orchestration (e.g., Power Automate, Python, APIs)
Security Analytics, Monitoring and Continuous Assurance Tooling
Baseline IAM Security Requirements and Control Testing
Review & Assurance Capability
Security design review and change assessment processes
Secure-by-design and baseline requirement validation
Automated control testing and evidence collection
Technology risk assessment and remediation tracking
Metrics, KRI/KPI definition and assurance reporting
Audit support and control effectiveness validation
Professional Experience
Experience performing IAM or security design reviews for applications and platforms.
Experience assessing applications against baseline IAM / access control requirements.
Experience building automation for control validation, evidence collection, or continuous assurance.
Experience integrating assurance checks with IAM and security tooling.
Experience tracking and driving remediation of identity and access control gaps.
Experience engaging with delivery, engineering, risk, and audit stakeholders.
Qualifications & Certifications
Experience
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience).
8+ years of overall experience in information security or IT, with 5+ years focused on Identity & Access Management.
3+ years performing IAM / security design reviews or control assurance for applications and platforms.
Demonstrated hands-on experience building automation for control validation, evidence collection, or continuous assurance.
Preferred Certifications
One or more of the following certifications is preferred
CISSP – Certified Information Systems Security Professional
CISM – Certified Information Security Manager
CIAM / Identity certifications (e.g., SailPoint, Okta, Microsoft Entra / Identity & Access Administrator SC-300)
CyberArk Defender / Sentry (Privileged Access Management)
Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft SC-100 / AZ-500, GCP Professional Cloud Security Engineer)
CCSP – Certified Cloud Security Professional
CISA – Certified Information Systems Auditor (for controls assurance and audit alignment)
Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.
