Company Description
Experian is a global data and technology company that drives opportunities for people and businesses around the world. We operate in diverse markets, such as financial services, healthcare, automotive, agribusiness, insurance, among others. Experian invests in people and in new advanced technologies to unleash the power of data. We have an amazing team of 25,200 employees in 32 countries.
Our uniqueness is valuing yours. Experian's culture, centered on people, inclusive and purpose-driven, is recognized by various awards, including World's Best Workplaces™ 2025 (Fortune Global Top 25) and Great Place To Work™ in 26 countries, among others. Check out Experian Life on social media or explore our careers site to understand why. Experian also takes pride in being an employer that promotes equal opportunities and affirmative action.
Job Description
As a leader within the Identity & Access Management (IAM) department of the Experian Global Security Office, you will lead a team responsible for evolving the IAM assurance model from periodic assessments to a continuous, risk-based monitoring approach across critical systems.
You will define the IAM assurance framework and reporting approach, with a particular focus on Identity Governance & Administration (IGA) and Privileged Access Management (PAM) controls, partnering with IAM Engineering teams to automate control testing, validations, and evidence collection.
You will work closely with control owners to investigate access-related risks, coordinate remediation activities, and improve control effectiveness. You will also coordinate assurance activities with Internal Audit, Risk Management, and Compliance teams, ensuring clear accountability and the appropriate level of independence.
By leveraging data, analytics, automation, and approved AI capabilities where appropriate, you will help expand monitoring coverage, identify issues earlier, strengthen compliance, and reduce manual effort. You will lead the IAM Assurance operating model and promote effective identity governance, privileged access controls, and continuous assurance practices across the organization.
Key Responsibilities
- Lead the design, implementation, and continuous improvement of IAM Continuous Assurance, including automated control monitoring, risk analysis, exception management, ongoing control validation, and assurance reporting.
- Establish and continuously assess assurance controls related to IGA and PAM, ensuring identity governance, privileged access, and supporting processes operate effectively and that control deficiencies are identified and remediated.
- Define and monitor controls related to identity lifecycle management, access requests and approvals, role-based access control, privileged access, segregation of duties, and periodic access reviews.
- Build repeatable testing and monitoring processes using IAM, HR, IT Service Management, directory, and application data; partner with IAM Engineering to automate control testing and evidence collection through analytics, workflow tools, and approved AI capabilities where appropriate.
- Serve as a subject matter expert in IGA and PAM assurance, including the evaluation of governance processes, technical controls, operational practices, exceptions, and control evidence.
- Identify inappropriate or excessive access, control failures, overdue access certifications, orphan accounts, policy exceptions, privileged access risks, and other identity-related risks; perform root cause analysis and coordinate remediation through to completion.
- Develop risk-based monitoring approaches focused on critical applications, privileged identities, high-risk access, control exceptions, and other material identity-related risks.
- Lead and develop the IAM Assurance team by setting clear objectives, priorities, and performance expectations while building capabilities in risk, controls, assurance, and data-driven decision making.
- Define and maintain the IAM Assurance operating model, ensuring clear accountability, appropriate independence, effective governance, and alignment with organizational frameworks.
- Provide technical and domain leadership in IAM governance, IGA, PAM, access control, and relevant frameworks such as ISO 27001; influence policies, standards, and best practices while remaining current on IAM technologies and industry trends.
- Partner with Internal Audit, Risk, Compliance, Technology, and business stakeholders; oversee relevant audit engagements, maintain IAM governance metrics and reporting, and support audit readiness and timely remediation efforts.
How Success Will Be Measured
- IAM control issues are identified early, assigned to clear owners, and resolved within agreed timelines.
- The effectiveness of IGA and PAM controls is measurable, with increasing automation of monitoring for critical and high-risk controls.
- Access reviews are completed on time with reliable evidence and proper exception management.
- Privileged access risks and exceptions are identified through repeatable monitoring processes and managed through defined remediation procedures.
- Monitoring coverage extends across critical systems and high-risk access, with a continuous reduction in manual gaps.
- Audit requests are supported by complete, consistent, and traceable evidence.
- Leadership receives timely reporting that enables effective understanding and management of IAM risks.
- Control improvements reduce recurring findings, unnecessary access, and avoidable exceptions.
Qualifications
Proven Experience and/or Knowledge In:
- Advanced English;
- Experience in IAM, security assurance, IT risk, audit, or a related discipline, including experience leading teams or programs. People management experience is strongly preferred.
- Experience designing, implementing, or operating Continuous Assurance, Continuous Controls Monitoring (CCM), automated compliance monitoring, or data-driven assurance programs.
- Strong hands-on or governance experience in Identity Governance and Administration (IGA), including joiner/mover/leaver processes, access certifications, role-based access control, privileged access, and segregation of duties.
- Strong knowledge of Privileged Access Management (PAM), including privileged account discovery and onboarding, credential management, access approvals, privileged session controls, least privilege principles, and reducing standing privileged access.
- Experience assessing the design and operational effectiveness of IGA and PAM controls, identifying control gaps, and translating findings into sustainable corrective actions.
- Experience with IAM platforms such as SailPoint, Okta, CyberArk, AWS, or Microsoft Entra ID, or equivalent technologies.
- Knowledge of security and risk management frameworks such as ISO 27001, NIST, PCI DSS, and Zero Trust, with the ability to translate requirements into effective IAM controls.
- Experience managing assurance or audit activities, with a strong understanding of accountability, independence, constructive challenge, and remediation practices.
- Ability to analyze identity and access data to identify exceptions, trends, and control weaknesses; experience with SQL, scripting, or reporting tools is considered an advantage.
Desired Skills
- Experience implementing, operating, or providing assurance over SailPoint and CyberArk environments is highly desirable.
- Experience using automation, analytics, workflow tools, or RPA to improve assurance processes; familiarity with approved AI or GenAI use cases is an advantage.
- Experience defining KRIs, KPIs, control health metrics, exception reporting, and executive IAM risk reporting is considered a plus.
- Strong communication, project management, and stakeholder management skills, including the ability to provide constructive challenge and explain risk to diverse audiences.
- CISSP, CISM, or other relevant cybersecurity certifications are considered an advantage.
Additional Information
Serasa Experian is much more than you imagine. With the purpose of creating a better future, expanding opportunities for people and businesses, in Brazil we are more than 4 thousand people working in various teams and specialties. Here, each knowledge and diversity complements each other and you can work on what you love most, we are committed to building an inclusive culture and an environment in which people can balance their careers with their personal commitments and interests, valuing well-being.
We are very dedicated to being one of the best and most innovative companies to work for in the country, enabling amazing experiences and careers for our people. Our strong people-first approach is externally recognized through various market certifications: we were awarded by Great Place To Work™ in 24 countries and by the international Top Employers certification, in addition to being recognized as one of the best companies for young professionals and having a 4.6 rating on Glassdoor. Each recognition tells us that we are on the right path, providing an increasingly better work environment for our talents.
Experian Careers - Creating a better tomorrow together
Find out what its like to work for Experian by clicking here
Experian Careers - Creating a better tomorrow together
Find out what its like to work for Experian by clicking here