{"id":4233016,"url":"https://alion.io/job/verisure-identity-trust-service-manager","title":"Identity & Trust Service Manager","company":{"id":1890878,"name":"Verisure","domain":"verisure.com","url":"https://alion.io/company/verisure-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":85,"open_postings":22,"ghost_share":0,"stale_share":0.591,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Field & Service","role_family":"Field & Service","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pozuelo de Alarcón, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"Zero Trust","optional":false},{"name":"CyberArk","optional":true}],"status":"live","first_seen_at":"2026-11-13T10:50:05Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T17:24:06Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"ROLE PURPOSE\nVerisure protects millions of families and businesses through connected devices, cloud platforms and a 24/7 operation. Trust in every person, machine, device and secret that touches that service is a core security capability, not a supporting function.\nThe Identity & PKI Manager is accountable end to end for that capability. The role owns the strategy, design, operation and commercial management of Verisure's identity and trust platforms, and leads a team of security engineers to deliver them as products with clear SLAs, measurable risk reduction and executive visibility.\nKEY ACCOUNTABILITIES\n1. Strategy and roadmap\nDefine and deliver a multi-year Identity & Trust roadmap aligned with the Security strategy, Zero Trust principles and business priorities.\nExtend identity framework from people to non-human identities and AI agents under a single control model.\n2. Unified IAM technical lifecycle\nOnboard new systems under the unified IAM: establish SailPoint as the single authority for joiner-mover-leaver, and bring applications, platforms and business-owned systems under it through a standard onboarding model, connectors and acceptance criteria.\n Reduce the footprint of local administration: retire locally managed user provisioning and deprovisioning, shrink manual and delegated admin processes, and track coverage, orphaned accounts and provisioning time as board-level indicators.\nMaintain Entra ID as the secure corporate identity plane, including Conditional Access, PIM and passwordless authentication.\nOwn privileged access (PAM) and secrets management as one continuum, from human administrators to machine and pipeline credentials.\n3. PKI service design and management\nTrust architecture: own the design of the corporate and device PKI, including CA hierarchy, certificate profiles, certificate policy and practice statements, HSM and key custody, and key ceremonies.\nDevice PKI at scale: design and run the identity and certificate lifecycle for connected devices, from factory provisioning through enrolment, renewal and revocation, in partnership with Product, Engineering and manufacturing partners.\nService model: define the PKI service catalogue, SLAs, ownership and operating procedures; set the standards for certificate usage across the company.\n4. Operations, platform maintenance and resilience\nGuarantee availability, performance and security of all platforms in scope, with disciplined incident, problem and change management.\nPlatform maintenance: own the full platform lifecycle: patching, upgrades, version currency, capacity, connector health, licence management, technical debt and end-of-life planning.\nEnsure tested disaster recovery for critical services: CA hierarchy, device certificate issuance, privileged vaults and secrets stores.\nRun the domain through KPIs and KRIs: IAM coverage, PAM coverage, expired certificates, secret rotation, provisioning time, platform currency and audit findings.\n5. Vendor and partner management\nManage manufacturers, integrators and managed service providers: contracts, SLAs, renewals, roadmap alignment and performance.\n6. Leadership of the security engineering team\nLead, develop and retain a team of security engineers; define roles, career paths and capacity plans.\nDrive a product-based, automation-first and DevSecOps operating model, in line with the domain-based organisation of Security Architecture and Engineering.\nPROFILE\nEssential\nDegree in Computer Science, Telecommunications Engineering or equivalent; a master's in cybersecurity is a plus.\n5+ years in cybersecurity or IT, including 3+ years leading technical teams.\nProven experience in at least three of: IGA, Entra ID, PKI, PAM, secrets management.\nTrack record owning a service end to end: roadmap, design, operations, budget and suppliers.\nExecutive communication in English and Spanish.\nValued\nDevice PKI at scale in IoT or industrial environments.\nExperience driving enterprise-wide IAM consolidation and decommissioning of local admin processes.\nNon-human identity, AI agent identity and modern authorisation models.\nCISSP, CISM, CCSP, or SailPoint, Microsoft or CyberArk certifications.\nMultinational, regulated or critical-infrastructure environments.","description_format":"text","description_chars":4225,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":3,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"Spanish","level":"Upper-Intermediate (B2)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Access Control & Alarm Systems"],"lifecycle":[{"event":"open","at":"2026-11-13T10:50:05Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":40,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-13T18:46:07Z"},"pay":null,"html_url":"https://alion.io/job/verisure-identity-trust-service-manager","json_url":"https://alion.io/job/verisure-identity-trust-service-manager.json","meta":{"generated_at":"2026-11-13T18:46:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":37515,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1890878},"rest":"https://alion.io/mcp/rest/get_company?id=1890878"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fverisure-identity-trust-service-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fverisure-identity-trust-service-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fverisure-identity-trust-service-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/verisure-identity-trust-service-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fverisure-identity-trust-service-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4233016}},{"tool":"search_jobs","arguments":{"company":"verisure.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4233016},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}