Manager IAM Architecture at Prudential in Bangalore

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed. The IAM Security Assurance Architect is responsible for reviewing all new applications, platforms, cloud services, and technology changes to ensure they meet the organisation's baseline IAM security requirements before they go live. The role acts as the IAM security review authority within technology delivery and change processes, and builds the automation needed to provide continuous assurance that identity and access controls remain effective throughout the application lifecycle. The focus is on two outcomes: rigorous security reviews and automated, always-on assurance. Key Responsibilities 1. IAM Security Reviews Serve as the IAM security review authority for new applications, technology platforms, cloud workloads, and infrastructure changes. Review designs and change requests through project lifecycle and design checkpoint governance processes. Assess and approve applications against baseline IAM security requirements, including: Authentication standards MFA requirements Privileged access controls Role-based access models Segregation of Duties requirements Identity lifecycle (joiner / mover / leaver) requirements Account provisioning and deprovisioning controls Service account and non-human identity management standards Federation and Single Sign-On requirements Review application access models, role structures, entitlement designs, and access matrices. Classify application criticality and confirm IAM onboarding requirements are met. Identify security risks, control gaps, and remediation actions, and confirm closure before deployment. Provide clear, documented review decisions and risk-based approvals to delivery teams. 2. Assurance Automation & Continuous Compliance Design and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements. Automate evidence collection and control checks to reduce manual review effort and provide always-on assurance. Establish automated, continuous monitoring for: Orphaned accounts Stale and dormant identities Excessive or unused privileges Toxic access combinations Service account and non-human identity risks Privileged account misuse Deviations from approved access baselines Integrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM). Define Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and IAM assurance health metrics. Build and maintain dashboards that surface control effectiveness and non-compliance for remediation. Drive an automate-first approach to control validation, minimising point-in-time manual checks. 3. Remediation, Risk & Reporting Track and drive closure of IAM security review findings and assurance exceptions. Review IAM-related risk assessments, exceptions, and remediation plans. Support internal and external audits with review evidence and assurance data. Report on review throughput, control coverage, and residual risk to IAM leadership. 4. Stakeholder Engagement Partner with application, engineering, cloud, and change teams to embed security-by-design in delivery. Advise project teams on how to meet baseline IAM requirements early in the lifecycle. Collaborate with Security, Risk, and Audit functions on assurance outcomes and control gaps. Key Deliverables IAM Security Review Decisions & Risk-Based Approvals Baseline IAM Requirement Assessments for New Applications Continuous Assurance Automation & Control Validation Framework Automated Evidence Collection & Complia