Manager - Privileged Access Management

Job Purpose:

Lead the Privileged Access Management (PAM) capability within the Identity & Access Management (IAM) function, providing strategic leadership, governance, and operational oversight for enterprise-wide Privileged Access Management and Secrets Management services.

Accountable for the development and execution of the PAM strategy and roadmap, ensuring the organisation maintains robust controls over privileged identities, credentials, service accounts, and non-human identities across on-premises, cloud, and hybrid environments. Drive the adoption of modern identity security practices, reduce cyber risk, strengthen regulatory compliance, and enhance operational efficiency through automation and continuous improvement.

Key Responsibilities:

• Lead, mentor, and develop a high-performing team of PAM engineers, fostering a culture of ownership, innovation, and continuous improvement.


• Define, maintain, and deliver the strategic roadmap for Privileged Access Management and Secrets Management capabilities.


• Establish and maintain enterprise-wide governance for privileged identities, service accounts, credentials, secrets, and non-human identities.


• Drive the adoption of least-privilege principles, just-in-time access, privileged session management, and modern identity security controls.


• Partner with Technology, Information Security, Risk, Architecture, and Audit teams to ensure privileged access risks are effectively managed and mitigated.


• Own the lifecycle management of privileged accounts, service accounts, credentials, and secrets across infrastructure, applications, databases, and cloud platforms.


• Lead PAM integration initiatives with Identity Governance & Administration (IGA), cloud security, DevOps, and automation platforms.


• Ensure compliance with applicable regulatory, audit, and internal policy requirements through effective controls, reporting, and governance.


• Develop and monitor meaningful KPIs, KRIs, and operational metrics to demonstrate service performance, control effectiveness, and risk reduction.


• Drive automation and process optimisation to improve scalability, user experience, and operational resilience.


• Manage PAM-related incidents, risks, and remediation activities, ensuring timely resolution and continuous improvement.


• Maintain awareness of emerging threats, technologies, and industry best practices, translating these into actionable improvements to the PAM programme.


• Contribute to the wider Identity & Access Management and Information Security strategy, supporting broader cyber security transformation initiatives.

Qualifications & Experience:

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or a related discipline, or equivalent professional experience.


• 8+ years' experience in Information Security, Identity & Access Management, Cyber Security, or related technology disciplines.


• Proven experience leading Privileged Access Management programmes within complex enterprise environments.


• Previous people management experience, including leading, coaching, and developing technical teams.


• Hands-on experience implementing and managing PAM platforms such as CyberArk, BeyondTrust, Delinea, or equivalent solutions.


• Experience implementing and supporting Secrets Management solutions, including HashiCorp Vault and cloud-native technologies.


• Experience integrating PAM capabilities with Identity Governance platforms such as SailPoint, Saviynt, or equivalent solutions.


• Experience operating within regulated environments and managing audit, risk, and compliance requirements.


• Demonstrated experience delivering security transformation, automation, and process improvement initiatives.

Knowledge & Skills:

• Deep understanding of Privileged Access Management frameworks, technologies, and industry best practices.


• Strong knowledge of privileged identity lifecycle management, credential vaulting, password rotation, session monitoring, and access governance.


• Expertise in service account, machine identity, and non-human identity management.


• Strong understanding of modern Identity & Access Management principles, including Zero Trust and least-privilege access models.


• Experience securing cloud environments across AWS, Azure, and/or GCP.


• Understanding of DevOps, CI/CD pipelines, infrastructure-as-code, and secrets management within cloud-native environments.


• Experience leveraging APIs, automation frameworks, and scripting languages such as Python and PowerShell.


• Strong understanding of cyber security frameworks, risk management practices, and regulatory requirements.


• Ability to balance technical, operational, risk, and business requirements when designing security solutions.


• Excellent stakeholder management and influencing skills, with the ability to engage effectively at all levels, including senior leadership.


• Strong analytical, problem-solving, and decision-making capabilities.