Identity and Access Management Lead (Cybersecurity)

Location: Hybrid role based in the Salford Quays office, with at least 50% of working time per month in the office; new starters initially work full-time from the office.

Company

hirify.global is a UK investment platform business providing ISA, pension, and dealing account solutions to more than 762,000 customers.

What you will do

• Lead IAM governance and continuous improvement across identity lifecycle management, access approvals, least privilege, segregation of duties, and privileged access.
• Oversee joiner, mover, and leaver controls and periodic access certification for human and non-human accounts, resolving exceptions and tracking access removal.
• Develop IAM metrics, KPI/KRI reporting, risk reporting, roadmaps, and improvement priorities for senior management and governance forums.
• Work with infrastructure, application development, security operations, and business stakeholders to embed IAM controls, improve integrations and automation, and strengthen role and entitlement ownership.
• Coordinate internal and external audits, maintain evidence, assess access risks, and track remediation actions.
• Define IAM controls for agentic AI and non-human identities, including ownership, delegated permissions, access boundaries, traceability, and revocation.

Requirements

• Experience leading IAM governance and improvement activities, including identity lifecycle management, access certification, privileged access governance, and control effectiveness assessment.
• Technical understanding of enterprise identity architecture, directories, cloud and on-premises access models, authentication, authorisation, single sign-on, and multi-factor authentication.
• Practical knowledge of identity governance and administration and privileged access management platforms, including application onboarding, identity correlation, entitlement data quality, access workflows, and control automation.
• Experience assessing identity and access risks, supporting audits, tracking remediation, and applying least privilege, role-based access, segregation of duties, and human and non-human account governance.
• Understanding of IAM considerations for agentic AI, including non-human identity ownership, delegated permissions, credential lifecycle management, access boundaries, and auditability.
• Familiarity with information security principles, tools, processes, procedures, and frameworks such as NIST and CIS.
• Ability to coach others, work through ambiguity in a dynamic and complex business environment, communicate effectively in writing and verbally, and challenge security approaches and implementation.
• Ability to plan, take ownership, organise work, follow through independently, and complete assigned tasks with little or no prompting.

Culture & Benefits

• 26 days of holiday increasing with service, plus bank holidays and a buy/sell scheme.
• 7% pension with matched contributions, discretionary bonus, share schemes, health cash plan, and discounted private healthcare.
• Enhanced family leave, travel and bike loan schemes, employee assistance programme, and free gym.
• Learning and development opportunities, regular social events, casual dress code, and a friendly, supportive team environment.
• Inclusive workplace committed to respectful treatment and hiring based on skills, experience, and potential.