IAM Governance Analyst (#4981)

We are looking for the specialist who owns the IAM governance framework, policies, and control system across the group,ensuring regulatory compliance, risk transparency, and consistent enforcement of the IAM Target Operating Model.

Key responsibilities:

Governance & Policy:

• Own and maintain IAM policies, standards, and procedures
• Own the IAM Target Operating Model (Process, Tooling, Organization)
• Define IAM decision rights, RACI and escalation paths
• Ensure alignment with regulatory and internal requirements (e.g. NIS2, ISO27001, Allianz requirements)

Risk, Control & Compliance: 

• Define IAM control objectives (e.g. access reviews, SoD, privileged access)
• Oversee design and effectiveness of IAM controls
• Coordinate IAM audits and regulatory reviews
• Own IAM risk register and exception management
• Define and track IAM KPIs and maturity metrics

Oversight & Steering:

• Govern IAM Business Operations and Global Platform Team
• Approve deviations and exceptions to IAM standards
• Provide guidance to Portfolio Companies and Application Owners
• Report IAM posture, risks, and progress to senior management

Required experience & expertise:

• 8–12+ years in Information Security, IAM, Governance or Risk roles
• Deep understanding of IAM concepts (JML, roles, SoD, access reviews, PAM)
• Strong experience with regulatory frameworks (ISO 27001, NIS2, internal controls)
• Experience operating in complex, federated organizations
• Proven audit and stakeholder management experience
• Ability to translate IAM risks into business language
• Upper Intermediate+ Spanish and English speaking languages