{"id":2169520,"url":"https://alion.io/job/n-ix-iam-transformation-lead","title":"IAM Transformation Lead","company":{"id":13248,"name":"N-iX","domain":"n-ix.com","url":"https://alion.io/company/n-ix","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":80,"open_postings":14,"ghost_share":0,"stale_share":0.786,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Service Desk","optional":false},{"name":"Active Directory","optional":true},{"name":"Microsoft Entra ID","optional":true}],"status":"live","first_seen_at":"2026-10-09T08:29:19Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-28T23:09:52Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"A multi-company group is building its IAM capability across several portfolio companies, each with its own IT function. The governance framework, the target operating model and the IAM control set are designed, and selection of an IGA platform is in the last stages of an RFP.\nThis role takes that foundation and turns it into something that operates: a platform in production, applications onboarded, roles defined, and controls producing evidence on a cadence. It is a build role in a federated group, not the stewardship of an established function. The person joining inherits a programme in motion, with the design work done and the delivery ahead of them.\nHow the role operates\nThe function is new and has no precedent to inherit. There is no IAM function above this role to escalate into, and for most decisions there is no prior ruling to point at. The role sets its own agenda, brings its own proposals to the forums it runs.\nThe role leads a project team of two IAM business analysts and three IAM integration engineers. It is not a solo role, but it is the only role accountable for the outcome. The holder sets the team’s direction and priorities and carries the programme themselves, with no programme manager or PMO between them and delivery.\nPurpose of the role\nOwn the IAM Target Operating Model end to end, from governance framework and control design through to delivery of the IAM platform and its adoption across the portfolio companies. Lead the IAM project team. Accountable for the group IAM maturity position and for the regulatory and internal compliance behind it.\nKey responsibilities\nLeading the team\nLead a project team of two IAM business analysts and three IAM integration engineers, setting direction, priorities and the expected standard of work.\nAllocate the team across governance workstreams and platform integration, and rebalance as the programme moves from design into delivery.\nBuild the team’s capability in a function where most practices are being established for the first time.\nHold the implementation partner and any managed services to the same standard as the internal team.\nProgramme delivery and IAM platform\nSet the IAM programme agenda and bring proposals and decisions to the governance forums, rather than waiting for direction.\nOwn delivery of the IAM platform implementation: scope, plan, milestones, budget and dependencies, with no PMO to carry them.\nDirect the implementation partner and managed services alongside the internal integration capacity.\nTranslate IAM requirements into platform configuration, and own the decisions where the two do not match.\nOwn application onboarding across the in-scope portfolio: sequencing, connector delivery, testing and cutover.\nOwn the commercial relationship after signature, including licence metric, identity counts, true-ups and change control.\nReport delivery progress, risks and decisions to the steering committee and to executive stakeholders.\nGovernance, policy and operating model\nOwn and maintain the IAM policies, standards and procedures.\nOwn the IAM Target Operating Model across process, tooling and organisation.\nDefine IAM decision rights, accountabilities and escalation paths, and keep them current as the function grows.\nEnsure alignment with regulatory and internal requirements, including ISO 27001 and DORA.\nRisk, control and compliance\n\nOwn the IAM control set: control objectives, design, execution cadence and evidence model.\nMove the controls from design into operation, and from Test of Design through to Test of Effectiveness.\nOwn the IAM risk register and exception management.\nCoordinate IAM audits and regulatory reviews.\nOwn the group IAM maturity position against the parent company’s IAM maturity framework, including the annual self-assessment and the agreed maturity trajectory.\nDefine and track IAM KPIs and maturity metrics.\nPortfolio company engagement\n\nSecure adoption of the group IAM operating model across the portfolio companies, each with its own IT function and its own priorities.\nGet IAM domain owners, business owners and application owners named, and keep them engaged in reviews, approvals and authorization concepts.\nWork with HR, service desk and infrastructure teams in each company on the joiner, mover and leaver process and the data behind it.\nOperate through influence rather than line authority across company boundaries.\nRole and access model\nOwn the business role model: design principles, taxonomy, eligibility and lifecycle.\nOwn authorization concepts across the in-scope applications, and the application criticality and entitlement risk classification behind them.\nOwn segregation of duties: rule design, conflict analysis and exception handling.\nOversight and reporting\nApprove deviations and exceptions to IAM standards.\nProvide guidance to the portfolio companies and application owners.\nReport IAM posture, risk and progress to senior management and to the parent company.\nWhat success looks like in the first twelve months\nThe IAM platform is in production, with the first wave of applications connected.\nThe Priority controls are operating on their defined cadence and producing evidence.\nAuthorization concepts are approved across the in-scope application portfolio.\nIAM domain owners are named and active in every portfolio company.\nThe group maturity position has reached the agreed target.\nThe programme plan for the following year is set, funded and agreed with the steering committee, on the holder’s own proposal.\nRequired experience and expertise\n8+ years in IAM, information security, governance or risk, with at least 2 years in a lead or ownership role.\nEvidence of having built an IAM or control function where one did not exist, rather than taking over one that was already running.\nDelivery of at least one IGA platform implementation end to end, including vendor and implementation partner management.\nExperience leading a mixed team of analysts and engineers, setting priorities across governance and technical delivery at the same time.\nAble to run the programme as its own project manager: plan, milestones, budget, risks and steering, with no PMO behind them.\nAble to get decisions out of senior stakeholders who do not report to them, and to keep those decisions made.\nDeep working knowledge of IAM: joiner, mover and leaver, role and entitlement design, segregation of duties, access reviews and privileged access.\nExperience operating in complex, federated or multi-entity organisations, where adoption is negotiated rather than mandated.\nComfortable working directly with access data: able to take a large directory or application extract and turn it.\ninto a finding or a role model without waiting for someone else to analyse it.\nExperience with regulatory and control frameworks, and with audit and evidence expectations.\nProven stakeholder management at executive level, and the ability to put IAM risk in business terms.\nLanguages: English mandatory, Spanish and German are a plus.\nDesirable\nExperience reporting into a parent company against a defined maturity framework.\nMicrosoft Entra ID and Active Directory at multi-tenant or multi-forest scale.\nHR-driven identity lifecycle from an HCM platform.\nPrivileged access management implementation experience.\nWe offer*:\nFlexible working format - remote, office-based or flexible\nA competitive salary and good compensation package\nPersonalized career growth\nProfessional development tools (mentorship program, tech talks and trainings, centers of excellence, and more)\nActive tech communities with regular knowledge sharing\nEducation reimbursement\nMemorable anniversary presents\nCorporate events and team buildings\nOther location-specific benefits\n*not applicable for freelancers","description_format":"text","description_chars":7724,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Spanish","level":"All levels","optional":false},{"language":"German","level":"All levels","optional":false},{"language":"English","level":"All levels","optional":false}]},"benefits":["Flexible schedule","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-09T11:28:58Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.695,"p_room":0.9,"age_days":18,"expected_fill_days":37,"reasons":["conf:0","stale_co","urgency","velocity","win:mid","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/n-ix-iam-transformation-lead","json_url":"https://alion.io/job/n-ix-iam-transformation-lead.json","meta":{"generated_at":"2026-10-29T01:19:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1914,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13248},"rest":"https://alion.io/mcp/rest/get_company?id=13248"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fn-ix-iam-transformation-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fn-ix-iam-transformation-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fn-ix-iam-transformation-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/n-ix-iam-transformation-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fn-ix-iam-transformation-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2169520}},{"tool":"search_jobs","arguments":{"company":"n-ix.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2169520},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}