Manager - Access Governance

Role & responsibilities

Role Purpose

The Manager Access Governance will be responsible for overseeing identity and access management (IAM) controls, ensuring secure access provisioning, monitoring, and compliance with regulatory and internal security standards. The role focuses on minimizing access risks, enforcing least privilege principles, and supporting audits and regulatory requirements.

Key Responsibilities

Access Governance & Control

• Manage user access lifecycle (Joiner–Mover–Leaver process).
  
• Ensure timely provisioning, modification, and revocation of access.
  
• Implement and monitor role-based access controls (RBAC).
  
• Enforce Segregation of Duties (SoD) controls.
  

Identity & Access Management (IAM)

• Oversee IAM tools and platforms (e.g., AD, LDAP, SailPoint, Okta, etc.).
  
• Conduct periodic access reviews and certification campaigns.
  
• Monitor privileged access management (PAM) activities.
  
• Identify and remediate unauthorized or excessive access.
  

Risk & Compliance

• Ensure compliance with regulatory requirements (RBI guidelines, ISO 27001, PCI-DSS).
  
• Support internal and external audits.
  
• Prepare compliance reports and dashboards for senior management.
  
• Address audit findings within agreed timelines.
  

Governance & Policy Management

• Develop and maintain access governance policies and SOPs.
  
• Drive automation initiatives for access provisioning and review.
  
• Collaborate with IT, HR, Risk, and Business teams to ensure effective governance.
  

Incident Management

• Investigate access-related incidents and security breaches.
  
• Perform root cause analysis and recommend corrective actions.
  

Qualifications & Experience

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field.
  
• 5–8 years of experience in IAM / Access Governance / Information Security.
  
• Experience in financial services or banking preferred.
  
• Certifications such as CISA, CISM, CISSP, or ISO 27001 LA are an advantage.
  

Required Skills

• Strong knowledge of IAM frameworks and access control models.
  
• Understanding of regulatory compliance (RBI, PCI-DSS, SOX).
  
• Hands-on experience with IAM/PAM tools.
  
• Analytical mindset with strong documentation skills.
  
• Excellent stakeholder management and communication skills.
  

Key Competencies

• Risk assessment and mitigation
  
• Process improvement and automation
  
• Attention to detail
  
• Decision-making capability
  
• Ability to manage cross-functional coordination