{"id":3343199,"url":"https://alion.io/job/tesco-lead-identity-and-access-management","title":"Lead Identity and Access Management","company":{"id":1059,"name":"Tesco","domain":"tesco.com","url":"https://alion.io/company/tesco","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Avature","truth_index":{"grade":"A","score":100,"open_postings":20,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":10,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Edinburgh, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":null,"max":114600,"currency":"GBP","period":"year","gross":null,"usd_annual":152507},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-27T16:12:24Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-02T13:28:57Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"About the role\nServing our customers, communities, and planet a little better every day.\n Salary - Up to £114,600 (DOE) + annual bonus & benefits\nWork Level - WL2\nLocation - Edinburgh, Permanent\nOffice Attendance - Our hybrid working model gives you the best of both worlds - flexibility to work from home and valuable face-to-face time with colleagues. This role typically requires 2 days per week onsite.\nClosing Date - Applications close on 30th October at 5pm. Don't miss out. We're assessing applications throughout the recruitment process and may close this opportunity ahead of the closing date if we receive a high volume of applications.\nWhy this role?\nThis is an exciting opportunity to lead and shape our Identity and Access Management capability at a pivotal stage of its development. The role will strengthen strategic ownership, accountability and long-term resilience across IAM, privileged access and data protection. You will lead key transformation initiatives, including identity governance, Zero Trust, automation and the adoption of modern platforms such as Entra ID, Saviynt, CyberArk and Microsoft Purview, while working with senior stakeholders to reduce cyber risk and enable secure business growth.\nWhat you’ll be doing\nStrengthen identity security by delivering a clear IAM strategy, roadmap and operating model across the organisation.\nReduce access risk through effective identity lifecycle management, access governance, least privilege and privileged access controls.\nProtect sensitive information by improving DLP coverage, detection quality and business adoption across endpoints, email and cloud services.\nDeliver secure transformation by embedding Zero Trust, automation and secure-by-design principles into projects and technology change.\nImprove control effectiveness and compliance by addressing audit findings, regulatory requirements and identity-related security risks.\nBuild a high-performing service by leading specialist teams, managing strategic partners and influencing senior stakeholders.\nWhat we’re looking for (minimum criteria)\nProven leadership experience delivering Identity and Access Management services in a complex enterprise environment.\nStrong expertise in identity governance, privileged access management and data protection controls.\nExperience managing security risks, regulatory requirements, audits and control remediation.\nStrong stakeholder and team leadership skills, with the ability to influence senior decision-makers and manage strategic partners.\nAnd if you have any of these, even better\nExperience working in financial services or another regulated environment.\nKnowledge of Zero Trust architecture and secure-by-design principles.\nFamiliarity with cloud identity controls across Microsoft Azure and AWS.\nRelevant professional certifications, such as CISSP, CISM or Technical certification in CyberArk, Microsoft Purview or Saviynt\nWe welcome applications from everyone. If you’re excited about this role but your experience doesn’t align perfectly with every requirement, we’d still love to hear from you.\nWhat’s in it for you\nA generous pension, with up to 7.5% employer contribution, depending on what you put in.\nPrivate Medical Insurance (WL2+) and virtual GP Service for you and your family\nPerformance related annual bonus.\n7.2 weeks holiday, with the opportunity to buy more.\nColleague Clubcard discount (10-15% + second card to share with someone else).\nEnhanced parental leave.\nOpportunities to Save and Buy as you earn.\nA place to get on - take advantage of our ongoing learning opportunities to help you achieve the job and career you want.\nInterviews\nAs a Disability Confident Employer (Level 2), we’re committed to creating an accessible and supportive environment for all. We offer reasonable adjustments throughout the recruitment process, including interviews, to ensure every candidate has a fair opportunity to succeed.\nWe also know the importance of balancing work with life’s other commitments. Please talk to us at interview about the flexibility you need, as we’re committed to exploring part time and flexible working opportunities, at every level of the organisation.\nInterviews are expected to be held ASAP.\nWhy Tesco Insurance and Money Services?\nSeeing your impact all around you: there's no better feeling.\nLucky for us, we get to feel it all the time. Because whatever our role, we're helping our colleagues and serving our customers, communities and planet a little better every day.\nWe deal in the personal - from pet insurance for your best friend, and home insurance for peace of mind, to motor insurance for your dream car or travel money for that trip you’ve worked hard for.\nEverything we do is about making things better. Not just for others, but for you too. It's why you'll get bags of choice and plenty of development. It's why you'll always be heard and find balance that works for you. It's why you'll feel totally at home in a place where everyone's welcome.\nSo, if you want a career where you can do good and feel good, you've found it.\nLet's make everyday a little better.\nOur story\nMaking Insurance and Money Services more rewarding and offering great value and choice - because we know little wins can make a big difference.\nWe began life in 1997 and now help more than 2 million customers protect what matters to them.\nWe want to deliver a helpful service in everything we do and to make life easier for our customers. Our policies are really easy to manage online for our customers, but we know that being able to speak to our customer service staff when you need to is really important. This is why our customer service centers are open seven days a week.\nDelivering great customer service means having great people behind the scenes - people who understand our customers and are driven by doing the right thing for them. We offer colleagues a place where they can feel totally at home in a place where everyone's welcome, where they can be part of a great team focused on making a real difference for our customers.\nHow to apply\nWe value our people and diverse teams and believe the variety of backgrounds and experiences make us stronger to achieve our goals.\nOur colleagues are working hybrid, taking time to meet with colleagues in our offices for moments that matter, such as team catch ups, planning meetings and more. If you’re interested in finding out more about what a career at Tesco Insurance and Money Services looks like, click apply to find out more!","description_format":"text","description_chars":6491,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance","Hybrid work","Parental leave"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Retail & Shop Systems","Online Groceries"],"lifecycle":[{"event":"open","at":"2026-10-27T16:12:24Z"}],"visa":[],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.884,"p_room":0.9,"age_days":5,"expected_fill_days":10,"reasons":["conf:1","velocity","win:mid","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":152507,"is_top_pay":false},"html_url":"https://alion.io/job/tesco-lead-identity-and-access-management","json_url":"https://alion.io/job/tesco-lead-identity-and-access-management.json","meta":{"generated_at":"2026-11-02T16:17:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22737,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1059},"rest":"https://alion.io/mcp/rest/get_company?id=1059"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftesco-lead-identity-and-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftesco-lead-identity-and-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftesco-lead-identity-and-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tesco-lead-identity-and-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftesco-lead-identity-and-access-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3343199}},{"tool":"search_jobs","arguments":{"company":"tesco.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3343199},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}