Manager IAM Architecture

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

The IAM Security Assurance Architect is responsible for reviewing all new applications, platforms, cloud services, and technology changes to ensure they meet the organisation's baseline IAM security requirements before they go live.

The role acts as the IAM security review authority within technology delivery and change processes, and builds the automation needed to provide continuous assurance that identity and access controls remain effective throughout the application lifecycle. The focus is on two outcomes: rigorous security reviews and automated, always-on assurance.

• IAM Security Reviews

Serve as the IAM security review authority for new applications, technology platforms, cloud workloads, and infrastructure changes.

Review designs and change requests through project lifecycle and design checkpoint governance processes.

Assess and approve applications against baseline IAM security requirements, including: Authentication standards

MFA requirements

Privileged access controls

Role-based access models

Segregation of Duties requirements

Identity lifecycle (joiner / mover / leaver) requirements

Account provisioning and deprovisioning controls

Service account and non-human identity management standards

Federation and Single Sign-On requirements

Review application access models, role structures, entitlement designs, and access matrices.

Classify application criticality and confirm IAM onboarding requirements are met.

Identify security risks, control gaps, and remediation actions, and confirm closure before deployment.

Provide clear, documented review decisions and risk-based approvals to delivery teams.

• Assurance Automation & Continuous Compliance

Design and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements.

Automate evidence collection and control checks to reduce manual review effort and provide always-on assurance.

Establish automated, continuous monitoring for: Orphaned accounts

Stale and dormant identities

Excessive or unused privileges

Toxic access combinations

Service account and non-human identity risks

Privileged account misuse

Deviations from approved access baselines

Integrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM).

Define Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and IAM assurance health metrics.

Build and maintain dashboards that surface control effectiveness and non-compliance for remediation.

Drive an automate-first approach to control validation, minimising point-in-time manual checks.

• Remediation, Risk & Reporting

Track and drive closure of IAM security review findings and assurance exceptions.

Review IAM-related risk assessments, exceptions, and remediation plans.

Support internal and external audits with review evidence and assurance data.

Report on review throughput, control coverage, and residual risk to IAM leadership.

• Stakeholder Engagement

Partner with application, engineering, cloud, and change teams to embed security-by-design in delivery.

Advise project teams on how to meet baseline IAM requirements early in the lifecycle.

Collaborate with Security, Risk, and Audit functions on assurance outcomes and control gaps.

Key Deliverables

IAM Security Review Decisions & Risk-Based Approvals

Baseline IAM Requirement Assessments for New Applications

Continuous Assurance Automation & Control Validation Framework

Automated Evidence Collection & Compliance Checks

IAM Assurance Dashboards & Metrics (KRIs / KPIs)

Review Findings, Remediation Tracking & Exception Reviews

Assurance Reporting for IAM Leadership and Audit

Skills & Experience

Technical Expertise

Identity Governance & Administration (IGA) – SailPoint ISC / IdentityIQ

Microsoft Entra ID and Active Directory

CyberArk Privileged Access Management

Authentication & Federation Protocols (OIDC, OAuth 2.0, SAML)

Cloud Identity Security and CIEM (Azure, AWS, GCP)

Service Account and Non-Human Identity Management

IAM Automation, Scripting and Orchestration (e.g., Power Automate, Python, APIs)

Security Analytics, Monitoring and Continuous Assurance Tooling

Baseline IAM Security Requirements and Control Testing

Review & Assurance Capability

Security design review and change assessment processes

Secure-by-design and baseline requirement validation

Automated control testing and evidence collection

Technology risk assessment and remediation tracking

Metrics, KRI/KPI definition and assurance reporting

Audit support and control effectiveness validation

Professional Experience

Experience performing IAM or security design reviews for applications and platforms.

Experience assessing applications against baseline IAM / access control requirements.

Experience building automation for control validation, evidence collection, or continuous assurance.

Experience integrating assurance checks with IAM and security tooling.

Experience tracking and driving remediation of identity and access control gaps.

Experience engaging with delivery, engineering, risk, and audit stakeholders.

Qualifications & Certifications

Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience).

8+ years of overall experience in information security or IT, with 5+ years focused on Identity & Access Management.

3+ years performing IAM / security design reviews or control assurance for applications and platforms.

Demonstrated hands-on experience building automation for control validation, evidence collection, or continuous assurance.

Preferred Certifications

One or more of the following certifications is preferred:

CISSP – Certified Information Systems Security Professional

CISM – Certified Information Security Manager

CIAM / Identity certifications (e.g., SailPoint, Okta, Microsoft Entra / Identity & Access Administrator SC-300)

CyberArk Defender / Sentry (Privileged Access Management)

Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft SC-100 / AZ-500, GCP Professional Cloud Security Engineer)

CCSP – Certified Cloud Security Professional

CISA – Certified Information Systems Auditor (for controls assurance and audit alignment)

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.