IAM Continuous Assurance Manager

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an IAM Continuous Assurance Manager based in Brazil.

We are seeking an experienced IAM Continuous Assurance Manager to lead the evolution of identity and access management assurance toward a proactive, continuous, and risk-based approach. In this leadership role, you will oversee assurance strategies covering Identity Governance and Administration (IGA) and Privileged Access Management (PAM), helping strengthen security controls across critical systems. You will partner with engineering, audit, risk, compliance, and technology teams to automate control testing, improve monitoring coverage, and ensure timely remediation of access-related risks. By leveraging data analytics, automation, and approved AI capabilities, you will help identify vulnerabilities earlier and reduce manual processes. This is an opportunity to shape a strategic assurance operating model, develop a specialized team, and strengthen security governance across a complex global organization.

Accountabilities:

• Lead the design, implementation, and continuous improvement of the IAM Continuous Assurance framework, including automated control monitoring, risk analysis, exception management, validation, and reporting.

• Establish and assess IGA and PAM assurance controls to ensure identity governance, privileged access, and supporting processes operate effectively.

• Define and monitor controls covering identity lifecycle management, access requests and approvals, role-based access control, segregation of duties, privileged access, and periodic access reviews.

• Partner with IAM Engineering to develop repeatable testing and monitoring processes using IAM, HR, IT service management, directory, and application data.

• Automate control testing and evidence collection through analytics, workflow tools, and approved AI capabilities where appropriate.

• Act as a subject matter expert in IGA and PAM assurance, evaluating governance processes, technical controls, operational practices, exceptions, and supporting evidence.

• Identify inappropriate or excessive access, control failures, overdue certifications, orphan accounts, policy exceptions, and privileged access risks.

• Conduct root cause analysis and coordinate remediation activities with control owners, ensuring issues are resolved within agreed timelines.

• Develop risk-based monitoring strategies focused on critical applications, privileged identities, high-risk access, and material control exceptions.

• Lead and develop the IAM Assurance team by setting objectives, priorities, and performance expectations while strengthening capabilities in risk management, controls, and data-driven decision-making.

• Define and maintain the IAM Assurance operating model, ensuring clear accountability, appropriate independence, effective governance, and alignment with organizational frameworks.

• Provide technical and domain leadership in IAM governance, IGA, PAM, access controls, and relevant security standards, including ISO 27001.

• Collaborate with Internal Audit, Risk, Compliance, Technology, and business stakeholders to coordinate assurance activities, support audit readiness, and oversee timely remediation.

• Maintain IAM governance metrics and reporting, providing leadership with clear visibility into control effectiveness, emerging risks, and improvement opportunities.

Requirements:

• Advanced English proficiency.

• Proven experience in IAM, security assurance, IT risk, audit, or a related discipline, including experience leading teams or programs. People management experience is strongly preferred.

• Experience designing, implementing, or operating Continuous Assurance, Continuous Controls Monitoring (CCM), automated compliance monitoring, or data-driven assurance programs.

• Strong hands-on or governance experience in Identity Governance and Administration (IGA), including joiner/mover/leaver processes, access certifications, role-based access control, privileged access, and segregation of duties.

• Strong knowledge of Privileged Access Management (PAM), including privileged account discovery and onboarding, credential management, access approvals, privileged session controls, least privilege principles, and reducing standing privileged access.

• Experience evaluating the design and operational effectiveness of IGA and PAM controls, identifying weaknesses, and translating findings into sustainable corrective actions.

• Familiarity with IAM platforms such as SailPoint, Okta, CyberArk, AWS, Microsoft Entra ID, or equivalent technologies.

• Knowledge of security and risk management frameworks such as ISO 27001, NIST, PCI DSS, and Zero Trust, with the ability to translate requirements into effective IAM controls.

• Experience managing assurance or audit activities, with a strong understanding of accountability, independence, constructive challenge, and remediation practices.

• Ability to analyze identity and access data to identify exceptions, trends, and control weaknesses.

• Strong communication, project management, and stakeholder management skills, including the ability to explain risks and provide constructive challenge to diverse audiences.

Nice to have:

• Experience implementing, operating, or providing assurance over SailPoint and CyberArk environments.

• Familiarity with automation, analytics, workflow tools, or robotic process automation (RPA) to improve assurance processes.

• Knowledge of approved AI and generative AI use cases for assurance and control monitoring.

• Experience defining key risk indicators (KRIs), key performance indicators (KPIs), control health metrics, exception reporting, and executive IAM risk reports.

• Proficiency in SQL, scripting, or reporting tools.

• CISSP, CISM, or other relevant cybersecurity certifications.

Benefits:

• Opportunity to lead and shape a strategic IAM Continuous Assurance function.

• Collaborative environment working with global security, engineering, audit, risk, and compliance teams.

• Opportunities to develop leadership capabilities and build a specialized assurance team.

• Inclusive, people-centered culture that values diversity, well-being, and professional development.

• Work environment that supports balance between professional responsibilities and personal interests.

• Recognition through workplace certifications and employer awards.