IN_Associate_IAM Engineer_Strategy, Governance, Risk & Compliance_Advisory_Pune

Job description

Line of Service Advisory Industry/Sector FS X-Sector Specialism Risk Management Level Associate Job Description & Summary At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. In threat intelligence and vulnerability management at PwC, you will focus on identifying and analysing potential threats to an organisation's security, as well as managing vulnerabilities to prevent cyber attacks. You will play a crucial role in safeguarding sensitive information and enabling the resilience of digital infrastructure. * Why PWC At PwC , you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more about us . At PwC , we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm’s growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations. " Job Description & Summary: An exciting opportunity is available to join this group for a senior experienced leader with a technical background in Identity & Access Management. They will lead the team and provide the technical capability to support the execution of critical IAM processes across MUFG. This will include platform operations, supporting and maintaining overall service health, managing vendors and driving the product direct and strategic delivery. The team handles day-to-day management of all Identity & Access Management needs of the business There will need to be close co-ordination with the other teams including HR, IT Risk, Compliance and Infrastructure Teams. All technical documentation and platform standards must be kept up to date and technical direction, and strategy must be developed and enhanced as required. The successful candidate will be an experienced leader and must familiarise themselves with the processes and procedures of the Bank quickly to be able to support and oversee the day-to-day platform and operational management. They will provide the team with coaching and mentoring on best practice in IAM. Candidates will be expected to articulate complex technical matters in plain English to earn the support of senior management stakeholders and those technically less experienced. The role requires an excellent team player; a self-starter with a motivation and desire to seek out & deliver improvements and a drive to build the team and promote future platform opportunities for approval and funding. Experience of managing personnel both onshore and offshore is essential. Candidates applying for this role must be able to demonstrate senior leadership and management skills, with around 10 years of experience, and have an in-depth knowledge of Identity & Access Management through either a recognised qualification or proven experience working in this area. Candidates should also be able to demonstrate practical experience and insight gained through similar roles including in-depth troubleshooting and team leadership skills. Responsibilities • Own and run end-to-end IAM operations to deliver reliable, secure, and scalable identity services across workforce and non-human identities. • Lead on IAM service delivery, automation and self-service, • Own day-to-day IAM operations across identity lifecycle (joiner-mover-leaver), access requests and access fulfillment workflows. • Run ITSM-aligned operations: incident, problem, change, request, and knowledge management with clear escalation paths and on-call readiness. • Own operational communications: status updates, planned maintenance notices, user-impact messaging, and post-incident reviews with measurable corrective actions. • Oversee operational stability and administration for IAM platforms and dependencies (examples: SSO/MFA platforms, directories, IGA administration, ITSM workflows, HR source-of-truth, APIs/connectors). • Lead audit and compliance execution for access controls: evidence collection, recertification operational execution, control testing support, remediation tracking, and sustained audit readiness. • Establish an automation-first operating model targeting removal of repetitive manual tasks and reduction of ticket volume across IAM workflows. • Expand end-user self-service capabilities (request catalog, automated approvals, MFA recovery flows, identity and access status checks) to reduce Service Desk dependency. • Implement a continuous improvement loop: analyze top ticket drivers, remove root causes, standardize processes, improve knowledge, and automate recurring issues. • Own operational risk posture for IAM services including access outages, mis-provisioning, privileged drift, toxic combinations and non-human identity sprawl • Ensure strong monitoring, alerting, and telemetry for IAM services and integrations, and partner with SecOps where needed (SIEM, logging, anomaly detection). • Drive reduction in repeat incidents through disciplined root cause analysis, prevention, and engineering partnership. • Build strong partnerships across Security, Infrastructure, HR, application owners, and enterprise service management teams. Skills and Experience: • 8-12 years of experience in IAM, security operations, or identity platform operations, with 5+ years leading teams and service delivery. • Proven experience operating IAM services at enterprise scale (large user populations, many applications, multi-region environments). • Strong ITSM and operational management experience: incident/problem/change/request, SLAs/SLOs, metrics, and service health reporting. • Demonstrated ability to manage third-party SI partners and/or managed services with measurable outcomes (scorecards, SLAs, escalations, coverage models). • Track record delivering automation and self-service using workflows, APIs, and orchestration with tangible reductions in manual effort and ticket volume. • Experience supporting audits and compliance requirements related to access controls (SOX, SOC 2, ISO 27001, PCI, or similar), including evidence production and remediation. • Excellent stakeholder management and communication skills, including leading major incidents and delivering executive-level updates. • High ownership and operational rigor with a strong bias for action and measurable outcomes. • Structured problem solving and disciplined root cause analysis with prevention mindset. • Clear communication under pressure with strong executive presence. • Ability to balance reliability, security, and user experience while driving standardization. • Talent builder who creates leaders and scales operating models globally. • Strong prioritization and roadmap discipline across run, improve, and transform workstreams. • Experience implementing privileged access operational controls, including emergency access, time-bound access, and privileged session support coordination. • Experience operating in complex environments (multiple directories/tenants, M&A integrations, directory consolidation, app migrations). • Familiarity with Zero Trust principles and identity-centric security patterns. • Experience applying AI agents or AI-assisted support in IT or security operations with strong governance and auditability. • A sound understanding of Identity and Access Management processes and controls including external audit and SOX requirements • Experience with critical production server support, application upgrades and project lifecycle/ SDLC processes • Good knowledge of control frameworks such as NIST, CRI, DORA, SOX. • Excellent written and verbal communication skills. • • Preferred: • • Knowledge of Privileged Access Management principles, process and tools • Experience applying to AI agents or AI-assisted support in IT or security operations with strong governance and auditability. • Exposure to cloud identity patterns (AWS, Azure, GCP) and CI/CD access models. • Financial Services experience a bonus • Experience of Financial regulations, compliance and standards • Must have Experience of supporting Global Organisation (10,000 users +) • Bachelor’s Degree in Computer Science or related disciplines • CISSP, CISM, or equivalent professional qualifications desirable The MUFG Group is committed to providing equal employment opportunities to all applicants and employees and does not discriminate on the basis of race, colour, national origin, physical appearance, religion, gender expression, gender identity, sex, age, ancestry, marital status, disability, medical condition, sexual orientation, genetic information, or any other protected status of an individual or that individual's associates or relatives, or any other classification protected by the applicable laws. Mandatory Skill sets: Vulnerability Management Security Monitoring Security Risk Management Reporting across regions Preferred Skill sets: Vulnerability Management Security Monitoring Security Risk Management Reporting across regions Years of Experience Required: 3-6 Education Qualification ANY GRAD Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Bachelor Degree Degrees/Field of Study preferred: Certifications (if blank, certifications not specified) Required Skills Cloud Security Risk Management, Oracle Management Cloud Security Monitoring and Analytics, Threat and Vulnerability Management Optional Skills Accepting Feedback, Accepting Feedback, Active Listening, Cloud Security, Communication, Conducting Research, Cyber Defense, Cyber Threat Intelligence, Emotional Regulation, Empathy, Encryption, Inclusion, Information Security, Intellectual Curiosity, Intelligence Analysis, Intelligence Report, Intrusion Detection, Intrusion Detection System (IDS), IT Operations, Malware Analysis, Malware Detection Tools, Malware Intelligence Gathering, Malware Research, Malware Reverse Engineering, Malware Sandboxing {+ 11 more} Desired Languages (If blank, desired languages not specified) Travel Requirements Available for Work Visa Sponsorship? Government Clearance Required? Job Posting End Date August 4, 2026