[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-manager-iam-architecture-prudential-technology-and-services-india-private-limited-de-in":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":66,"processed_longitude":68,"processed_employment_types":70,"processed_working_hours":71,"processed_working_hours_labels":73,"processed_home_office":74,"processed_salary_min":63,"processed_salary_max":64,"processed_salary_currency":60,"processed_salary_source":75,"processed_benefits":76,"processed_benefits_labels":79,"processed_industry":80,"processed_skills":7,"processed_job_location":81,"processed_full_address_gmaps":83,"processed_street_gmaps":85,"processed_city_gmaps":86,"processed_postal_code_gmaps":87,"processed_country_gmaps":88,"processed_country_iso_code_gmaps":89,"full_description":16,"formatted_description":91,"processed_employment_types_labels":24,"processed_home_office_labels":22,"processed_industry_labels":26,"processed_it_skills":92,"processed_it_skills_labels":95,"processed_soft_skills":96,"processed_soft_skills_labels":97,"processed_job_expertise_skills":98,"processed_job_expertise_skills_labels":99,"processed_language_requirements":100,"processed_total_experience_years":107,"processed_professional_field":108,"processed_professional_field_labels":111,"processed_leadership_role":12,"processed_date_posted":20,"raw_job_url":112,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":113,"canonical_industry_label":114,"max_cpc":115,"actual_cpc":7},96216,"manager-iam-architecture-prudential-technology-and-services-india-private-limited","Manager IAM Architecture",null,{"name":9,"slug":10,"logo_url":7},"Prudential Technology and Services India Private Limited","prudential-technology-and-services-india-private-limited",false,true,{"@context":14,"@type":15,"title":6,"description":16,"hiringOrganization":17,"datePosted":20,"validThrough":21,"jobLocationType":22,"employmentType":23,"industry":25,"skills":27,"baseSalary":58},"https:\u002F\u002Fschema.org\u002F","JobPosting","Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed. The IAM Security Assurance Architect is responsible for reviewing all new applications, platforms, cloud services, and technology changes to ensure they meet the organisation's baseline IAM security requirements before they go live. The role acts as the IAM security review authority within technology delivery and change processes, and builds the automation needed to provide continuous assurance that identity and access controls remain effective throughout the application lifecycle. The focus is on two outcomes: rigorous security reviews and automated, always-on assurance. Key Responsibilities 1. IAM Security Reviews Serve as the IAM security review authority for new applications, technology platforms, cloud workloads, and infrastructure changes. Review designs and change requests through project lifecycle and design checkpoint governance processes. Assess and approve applications against baseline IAM security requirements, including: Authentication standards MFA requirements Privileged access controls Role-based access models Segregation of Duties requirements Identity lifecycle (joiner \u002F mover \u002F leaver) requirements Account provisioning and deprovisioning controls Service account and non-human identity management standards Federation and Single Sign-On requirements Review application access models, role structures, entitlement designs, and access matrices. Classify application criticality and confirm IAM onboarding requirements are met. Identify security risks, control gaps, and remediation actions, and confirm closure before deployment. Provide clear, documented review decisions and risk-based approvals to delivery teams. 2. Assurance Automation & Continuous Compliance Design and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements. Automate evidence collection and control checks to reduce manual review effort and provide always-on assurance. Establish automated, continuous monitoring for: Orphaned accounts Stale and dormant identities Excessive or unused privileges Toxic access combinations Service account and non-human identity risks Privileged account misuse Deviations from approved access baselines Integrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM). Define Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and IAM assurance health metrics. Build and maintain dashboards that surface control effectiveness and non-compliance for remediation. Drive an automate-first approach to control validation, minimising point-in-time manual checks. 3. Remediation, Risk & Reporting Track and drive closure of IAM security review findings and assurance exceptions. Review IAM-related risk assessments, exceptions, and remediation plans. Support internal and external audits with review evidence and assurance data. Report on review throughput, control coverage, and residual risk to IAM leadership. 4. Stakeholder Engagement Partner with application, engineering, cloud, and change teams to embed security-by-design in delivery. Advise project teams on how to meet baseline IAM requirements early in the lifecycle. Collaborate with Security, Risk, and Audit functions on assurance outcomes and control gaps. Key Deliverables IAM Security Review Decisions & Risk-Based Approvals Baseline IAM Requirement Assessments for New Applications Continuous Assurance Automation & Control Validation Framework Automated Evidence Collection & Compliance Checks IAM Assurance Dashboards & Metrics (KRIs \u002F KPIs) Review Findings, Remediation Tracking & Exception Reviews Assurance Reporting for IAM Leadership and Audit Skills & Experience Technical Expertise Identity Governance & Administration (IGA) – SailPoint ISC \u002F IdentityIQ Microsoft Entra ID and Active Directory CyberArk Privileged Access Management Authentication & Federation Protocols (OIDC, OAuth 2.0, SAML) Cloud Identity Security and CIEM (Azure, AWS, GCP) Service Account and Non-Human Identity Management IAM Automation, Scripting and Orchestration (e.g., Power Automate, Python, APIs) Security Analytics, Monitoring and Continuous Assurance Tooling Baseline IAM Security Requirements and Control Testing Review & Assurance Capability Security design review and change assessment processes Secure-by-design and baseline requirement validation Automated control testing and evidence collection Technology risk assessment and remediation tracking Metrics, KRI\u002FKPI definition and assurance reporting Audit support and control effectiveness validation Professional Experience Experience performing IAM or security design reviews for applications and platforms. Experience assessing applications against baseline IAM \u002F access control requirements. Experience building automation for control validation, evidence collection, or continuous assurance. Experience integrating assurance checks with IAM and security tooling. Experience tracking and driving remediation of identity and access control gaps. Experience engaging with delivery, engineering, risk, and audit stakeholders. Qualifications & Certifications Experience Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience). 8+ years of overall experience in information security or IT, with 5+ years focused on Identity & Access Management. 3+ years performing IAM \u002F security design reviews or control assurance for applications and platforms. Demonstrated hands-on experience building automation for control validation, evidence collection, or continuous assurance. Preferred Certifications One or more of the following certifications is preferred: CISSP – Certified Information Systems Security Professional CISM – Certified Information Security Manager CIAM \u002F Identity certifications (e.g., SailPoint, Okta, Microsoft Entra \u002F Identity & Access Administrator SC-300) CyberArk Defender \u002F Sentry (Privileged Access Management) Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft SC-100 \u002F AZ-500, GCP Professional Cloud Security Engineer) CCSP – Certified Cloud Security Professional CISA – Certified Information Systems Auditor (for controls assurance and audit alignment) Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time \u002F fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements. We are Prudential. For every life, we are partners. For every future, we are protectors. Prudential plc provides life and health insurance and asset management to 17 million customers across 20 markets in Asia and Africa. We are headquartered in Hong Kong and have dual primary listings on the Stock Exchange of Hong Kong and the London Stock Exchange. We are focused on four strategic regions: Greater China, ASEAN, India and Africa. Our customers are served by around 55,000 agents and more than 200 bank partners. Prudential plc is not affiliated in any manner with Prudential Financial, Inc., a company whose principal place of business is in the United States of America or with the Prudential Assurance Company, a subsidiary of M&G plc, a company incorporated in the United Kingdom. Find out more at www.prudentialplc.com Follow us on LinkedIn",{"@type":18,"name":19},"Organization","PTSI Prudential Technology and Services India Private Limited","2026-10-29","2027-10-29","HYBRID",[24],"PERMANENT",[26],"Insurance and Asset Management",[28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57],"SailPoint","Microsoft Entra ID","Active Directory","CyberArk","OIDC","OAuth 2.0","SAML","Azure","AWS","GCP","Power Automate","Python","APIs","Stakeholder Engagement","Communication","Collaboration","Analytical Thinking","Risk Assessment","Identity Governance & Administration (IGA)","Privileged Access Management","Authentication & Federation Protocols","Cloud Identity Security","Service Account and Non-Human Identity Management","IAM Automation","Security Analytics","Security Design Review","Control Testing","Technology Risk Assessment","Metrics Definition (KRI\u002FKPI)","Audit Support",{"@type":59,"currency":60,"value":61},"MonetaryAmount","INR",{"@type":62,"minValue":63,"maxValue":64,"unitText":65},"QuantitativeValue",2500000,4000000,"YEAR",[67],20.593684,[69],78.96288,"permanent",[72],"FULL_TIME",[72],"hybrid","estimated",[77,78],"Equal opportunity employer","Reasonable adjustments for physical or mental health requirements",[77,78],"insurance and asset management",[82],"ptsi, ptsi | india office, india",[84],"Indien",[],[],[],[84],[90],"IN","Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.\n\nThe IAM Security Assurance Architect is responsible for reviewing all new applications, platforms, cloud services, and technology changes to ensure they meet the organisation's baseline IAM security requirements before they go live. The role acts as the IAM security review authority within technology delivery and change processes, and builds the automation needed to provide continuous assurance that identity and access controls remain effective throughout the application lifecycle. The focus is on two outcomes: rigorous security reviews and automated, always-on assurance.\n\n## Key Responsibilities\n\n### 1. IAM Security Reviews\n\n- Serve as the IAM security review authority for new applications, technology platforms, cloud workloads, and infrastructure changes.\n- Review designs and change requests through project lifecycle and design checkpoint governance processes.\n- Assess and approve applications against baseline IAM security requirements, including:\n  - Authentication standards\n  - MFA requirements\n  - Privileged access controls\n  - Role-based access models\n  - Segregation of Duties requirements\n  - Identity lifecycle (joiner \u002F mover \u002F leaver) requirements\n  - Account provisioning and deprovisioning controls\n  - Service account and non-human identity management standards\n  - Federation and Single Sign-On requirements\n- Review application access models, role structures, entitlement designs, and access matrices.\n- Classify application criticality and confirm IAM onboarding requirements are met.\n- Identify security risks, control gaps, and remediation actions, and confirm closure before deployment.\n- Provide clear, documented review decisions and risk-based approvals to delivery teams.\n\n### 2. Assurance Automation & Continuous Compliance\n\n- Design and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements.\n- Automate evidence collection and control checks to reduce manual review effort and provide always-on assurance.\n- Establish automated, continuous monitoring for:\n  - Orphaned accounts\n  - Stale and dormant identities\n  - Excessive or unused privileges\n  - Toxic access combinations\n  - Service account and non-human identity risks\n  - Privileged account misuse\n  - Deviations from approved access baselines\n- Integrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM).\n- Define Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and IAM assurance health metrics.\n- Build and maintain dashboards that surface control effectiveness and non-compliance for remediation.\n- Drive an automate-first approach to control validation, minimising point-in-time manual checks.\n\n### 3. Remediation, Risk & Reporting\n\n- Track and drive closure of IAM security review findings and assurance exceptions.\n- Review IAM-related risk assessments, exceptions, and remediation plans.\n- Support internal and external audits with review evidence and assurance data.\n- Report on review throughput, control coverage, and residual risk to IAM leadership.\n\n### 4. Stakeholder Engagement\n\n- Partner with application, engineering, cloud, and change teams to embed security-by-design in delivery.\n- Advise project teams on how to meet baseline IAM requirements early in the lifecycle.\n- Collaborate with Security, Risk, and Audit functions on assurance outcomes and control gaps.\n\n## Key Deliverables\n\n- IAM Security Review Decisions & Risk-Based Approvals\n- Baseline IAM Requirement Assessments for New Applications\n- Continuous Assurance Automation & Control Validation Framework\n- Automated Evidence Collection & Compliance Checks\n- IAM Assurance Dashboards & Metrics (KRIs \u002F KPIs)\n- Review Findings, Remediation Tracking & Exception Reviews\n- Assurance Reporting for IAM Leadership and Audit\n\n## Skills & Experience\n\n### Technical Expertise\n\n- Identity Governance & Administration (IGA) – SailPoint ISC \u002F IdentityIQ\n- Microsoft Entra ID and Active Directory\n- CyberArk Privileged Access Management\n- Authentication & Federation Protocols (OIDC, OAuth 2.0, SAML)\n- Cloud Identity Security and CIEM (Azure, AWS, GCP)\n- Service Account and Non-Human Identity Management\n- IAM Automation, Scripting and Orchestration (e.g., Power Automate, Python, APIs)\n- Security Analytics, Monitoring and Continuous Assurance Tooling\n- Baseline IAM Security Requirements and Control Testing\n\n### Review & Assurance Capability\n\n- Security design review and change assessment processes\n- Secure-by-design and baseline requirement validation\n- Automated control testing and evidence collection\n- Technology risk assessment and remediation tracking\n- Metrics, KRI\u002FKPI definition and assurance reporting\n- Audit support and control effectiveness validation\n\n### Professional Experience\n\n- Experience performing IAM or security design reviews for applications and platforms.\n- Experience assessing applications against baseline IAM \u002F access control requirements.\n- Experience building automation for control validation, evidence collection, or continuous assurance.\n- Experience integrating assurance checks with IAM and security tooling.\n- Experience tracking and driving remediation of identity and access control gaps.\n- Experience engaging with delivery, engineering, risk, and audit stakeholders.\n\n## Qualifications & Certifications\n\n### Experience\n\n- Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience).\n- 8+ years of overall experience in information security or IT, with 5+ years focused on Identity & Access Management.\n- 3+ years performing IAM \u002F security design reviews or control assurance for applications and platforms.\n- Demonstrated hands-on experience building automation for control validation, evidence collection, or continuous assurance.\n\n### Preferred Certifications\n\nOne or more of the following certifications is preferred:\n\n- CISSP – Certified Information Systems Security Professional\n- CISM – Certified Information Security Manager\n- CIAM \u002F Identity certifications (e.g., SailPoint, Okta, Microsoft Entra \u002F Identity & Access Administrator SC-300)\n- CyberArk Defender \u002F Sentry (Privileged Access Management)\n- Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft SC-100 \u002F AZ-500, GCP Professional Cloud Security Engineer)\n- CCSP – Certified Cloud Security Professional\n- CISA – Certified Information Systems Auditor (for controls assurance and audit alignment)\n\nPrudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time \u002F fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.\n\nWe are Prudential. For every life, we are partners. For every future, we are protectors.\n\nPrudential plc provides life and health insurance and asset management to 17 million customers across 20 markets in Asia and Africa. We are headquartered in Hong Kong and have dual primary listings on the Stock Exchange of Hong Kong and the London Stock Exchange. We are focused on four strategic regions: Greater China, ASEAN, India and Africa. Our customers are served by around 55,000 agents and more than 200 bank partners. Prudential plc is not affiliated in any manner with Prudential Financial, Inc., a company whose principal place of business is in the United States of America or with the Prudential Assurance Company, a subsidiary of M&G plc, a company incorporated in the United Kingdom.\n\nFind out more at www.prudentialplc.com\n\nFollow us on LinkedIn",{"aws":93,"gcp":93,"apis":93,"oidc":93,"saml":93,"azure":93,"python":93,"cyberark":94,"oauth 2.0":93,"sailpoint":94,"power automate":93,"active directory":94,"microsoft entra id":94},3,4,[28,29,30,31,32,33,34,35,36,37,38,39,40],{"stakeholder engagement":94,"communication":94,"collaboration":94,"analytical thinking":94,"risk assessment":94},[41,42,43,44,45],{"audit support":93,"iam automation":93,"control testing":94,"security analytics":93,"security design review":94,"cloud identity security":93,"technology risk assessment":94,"metrics definition (kri\u002Fkpi)":93,"privileged access management":94,"authentication & federation protocols":93,"identity governance & administration (iga)":94,"service account and non-human identity management":93},[46,47,48,49,50,51,52,53,54,55,56,57],{"detected_language_jobad":101,"required":102},"en",[103],[104],{"language":105,"level":106},"ENGLISH","C1",8,[109,110],"Information and Communications Technology Service Managers","Database and Network Professionals",[109,110],"https:\u002F\u002Fprudential.wd3.myworkdayjobs.com\u002Fen-us\u002Fprudential\u002Fjob\u002Fbangalore\u002Fmanager-iam-architecture_26080484","insurance","Insurance",1]