This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are looking for the specialist who owns the IAM governance framework, policies, and control system across the group, ensuring regulatory compliance, risk transparency, and consistent enforcement of the IAM Target Operating Model.
Job Responsibility:
Own and maintain IAM policies, standards, and procedures
Own the IAM Target Operating Model (Process, Tooling, Organization)
Define IAM decision rights, RACI and escalation paths
Ensure alignment with regulatory and internal requirements (e.g. NIS2, ISO27001, Allianz requirements)
Define IAM control objectives (e.g. access reviews, SoD, privileged access)
Oversee design and effectiveness of IAM controls
Coordinate IAM audits and regulatory reviews
Own IAM risk register and exception management
Define and track IAM KPIs and maturity metrics
Govern IAM Business Operations and Global Platform Team
Approve deviations and exceptions to IAM standards
Provide guidance to Portfolio Companies and Application Owners
Report IAM posture, risks, and progress to senior management
Requirements:
8–12+ years in Information Security, IAM, Governance or Risk roles
Deep understanding of IAM concepts (JML, roles, SoD, access reviews, PAM)
Strong experience with regulatory frameworks (ISO 27001, NIS2, internal controls)
Experience operating in complex, federated organizations
Proven audit and stakeholder management experience
Ability to translate IAM risks into business language
Upper Intermediate+ Spanish and English speaking languages
What we offer:
Flexible working format - remote, office-based or flexible
A competitive salary and good compensation package
Personalized career growth
Professional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)
Active tech communities with regular knowledge sharing