{"id":3452731,"url":"https://alion.io/job/prudential-singapore-manager-iam-architecture","title":"Manager IAM Architecture","company":{"id":232568,"name":"Prudential Singapore","domain":"prudential.com.sg","url":"https://alion.io/company/prudential-2","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":54,"ghost_share":0,"stale_share":0.574,"repost_share":0,"time_to_fill_p50_days":61,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Power Automate","optional":false},{"name":"Python","optional":false},{"name":"Sentry","optional":false}],"status":"live","first_seen_at":"2026-10-29T12:00:45Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-01T06:48:12Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.\nThe IAM Security Assurance Architect is responsible for reviewing all new applications, platforms, cloud services, and technology changes to ensure they meet the organisation's baseline IAM security requirements before they go live.\nThe role acts as the IAM security review authority within technology delivery and change processes, and builds the automation needed to provide continuous assurance that identity and access controls remain effective throughout the application lifecycle. The focus is on two outcomes: rigorous security reviews and automated, always-on assurance.\nKey Responsibilities\n1. IAM Security Reviews\nServe as the IAM security review authority for new applications, technology platforms, cloud workloads, and infrastructure changes.\nReview designs and change requests through project lifecycle and design checkpoint governance processes.\nAssess and approve applications against baseline IAM security requirements, including:Authentication standards\nMFA requirements\nPrivileged access controls\nRole-based access models\nSegregation of Duties requirements\nIdentity lifecycle (joiner / mover / leaver) requirements\nAccount provisioning and deprovisioning controls\nService account and non-human identity management standards\nFederation and Single Sign-On requirements\n\nReview application access models, role structures, entitlement designs, and access matrices.\nClassify application criticality and confirm IAM onboarding requirements are met.\nIdentify security risks, control gaps, and remediation actions, and confirm closure before deployment.\nProvide clear, documented review decisions and risk-based approvals to delivery teams.\n2. Assurance Automation & Continuous Compliance\nDesign and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements.\nAutomate evidence collection and control checks to reduce manual review effort and provide always-on assurance.\nEstablish automated, continuous monitoring for:Orphaned accounts\nStale and dormant identities\nExcessive or unused privileges\nToxic access combinations\nService account and non-human identity risks\nPrivileged account misuse\nDeviations from approved access baselines\n\nIntegrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM).\nDefine Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and IAM assurance health metrics.\nBuild and maintain dashboards that surface control effectiveness and non-compliance for remediation.\nDrive an automate-first approach to control validation, minimising point-in-time manual checks.\n3. Remediation, Risk & Reporting\nTrack and drive closure of IAM security review findings and assurance exceptions.\nReview IAM-related risk assessments, exceptions, and remediation plans.\nSupport internal and external audits with review evidence and assurance data.\nReport on review throughput, control coverage, and residual risk to IAM leadership.\n4. Stakeholder Engagement\nPartner with application, engineering, cloud, and change teams to embed security-by-design in delivery.\nAdvise project teams on how to meet baseline IAM requirements early in the lifecycle.\nCollaborate with Security, Risk, and Audit functions on assurance outcomes and control gaps.\nKey Deliverables\nIAM Security Review Decisions & Risk-Based Approvals\nBaseline IAM Requirement Assessments for New Applications\nContinuous Assurance Automation & Control Validation Framework\nAutomated Evidence Collection & Compliance Checks\nIAM Assurance Dashboards & Metrics (KRIs / KPIs)\nReview Findings, Remediation Tracking & Exception Reviews\nAssurance Reporting for IAM Leadership and Audit\nSkills & Experience\nTechnical Expertise\nIdentity Governance & Administration (IGA) - SailPoint ISC / IdentityIQ\nMicrosoft Entra ID and Active Directory\nCyberArk Privileged Access Management\nAuthentication & Federation Protocols (OIDC, OAuth 2.0, SAML)\nCloud Identity Security and CIEM (Azure, AWS, GCP)\nService Account and Non-Human Identity Management\nIAM Automation, Scripting and Orchestration (e.g., Power Automate, Python, APIs)\nSecurity Analytics, Monitoring and Continuous Assurance Tooling\nBaseline IAM Security Requirements and Control Testing\nReview & Assurance Capability\nSecurity design review and change assessment processes\nSecure-by-design and baseline requirement validation\nAutomated control testing and evidence collection\nTechnology risk assessment and remediation tracking\nMetrics, KRI/KPI definition and assurance reporting\nAudit support and control effectiveness validation\nProfessional Experience\nExperience performing IAM or security design reviews for applications and platforms.\nExperience assessing applications against baseline IAM / access control requirements.\nExperience building automation for control validation, evidence collection, or continuous assurance.\nExperience integrating assurance checks with IAM and security tooling.\nExperience tracking and driving remediation of identity and access control gaps.\nExperience engaging with delivery, engineering, risk, and audit stakeholders.\nQualifications & Certifications\nExperience\nBachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience).\n8+ years of overall experience in information security or IT, with 5+ years focused on Identity & Access Management.\n3+ years performing IAM / security design reviews or control assurance for applications and platforms.\nDemonstrated hands-on experience building automation for control validation, evidence collection, or continuous assurance.\nPreferred Certifications\nOne or more of the following certifications is preferred:\nCISSP - Certified Information Systems Security Professional\nCISM - Certified Information Security Manager\nCIAM / Identity certifications (e.g., SailPoint, Okta, Microsoft Entra / Identity & Access Administrator SC-300)\nCyberArk Defender / Sentry (Privileged Access Management)\nCloud security certifications (e.g., AWS Certified Security - Specialty, Microsoft SC-100 / AZ-500, GCP Professional Cloud Security Engineer)\nCCSP - Certified Cloud Security Professional\nCISA - Certified Information Systems Auditor (for controls assurance and audit alignment)\nPrudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.","description_format":"text","description_chars":7393,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-10-29T12:00:45Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":61,"reasons":["conf:11","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/prudential-singapore-manager-iam-architecture","json_url":"https://alion.io/job/prudential-singapore-manager-iam-architecture.json","meta":{"generated_at":"2026-11-01T11:54:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18437,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":232568},"rest":"https://alion.io/mcp/rest/get_company?id=232568"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fprudential-singapore-manager-iam-architecture"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fprudential-singapore-manager-iam-architecture"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fprudential-singapore-manager-iam-architecture"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/prudential-singapore-manager-iam-architecture\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fprudential-singapore-manager-iam-architecture"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3452731}},{"tool":"search_jobs","arguments":{"company":"prudential.com.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3452731},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}