VPSVP, Identity & Access Management (IAM), Technology Group

Location:Singapore

Job Function:Technology Group

Job Type:Permanent

Req ID:17421

GIC is one of the worlds largest sovereign wealth funds. With over 2000 employees across 11 locations around the world we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the worlds industry leaders. As a leading global long-term investor we Work at the Point of Impact for Singapores financial future and the communities we invest in worldwide.

Technology Group
The Technology Group (TG) is a key enabler to keep our business moving forward and is constantly exploiting state-of-the-art information technologies to enhance GICs ability to be the leading global long-term investment firm. We aim to provide users with empowering and transformational capabilities and to create an inclusive innovative and integrated work environment.

Infrastructure Cybersecurity & Resilience (ICR)

Our mission is to fortify GICs infrastructure and cybersecurity capabilities by embedding security and resilience into everything we do providing stable secure and dependable services and individual will be part of the Cybersecurity Assurance & Defence (CSAD) team and will play a key role in strengthening the firms security posture through proactive vulnerability management adversarial attack simulation planning and continuous improvement of security. The individual will serve as a control owner driving threat prioritization root cause analysis and cross-team collaboration to remediate and prevent recurrence of vulnerabilities.

What impact can you make in this role

The IAM SVP/VP is responsible for the transforming and managing end-to-end identity governance and administration (IGA) function driving joiner-mover-leaver (JML) processes access recertification role and entitlement management and identity lifecycle management across the organization while acting as a consulted partner to the Identity Threat Detection and Response (ITDR) function.

What will you do as VP/SVP Identity & Access Management (IAM) Technology Group

Identity Lifecycle Management (JML):

• Own and continuously improve the joiner-mover-leaver (JML) lifecycle process across systems ensuring timely and accurate provisioning transfers and de-provisioning of identities in line with HR and business events.
• Maintain and govern the identity lifecycle framework across on-premises cloud and hybrid environments (AD AWS Azure Linux Windows databases etc.).
• Extend identity lifecycle governance to AI and other non-human identities including AI agents bots service accounts and machine-to-machine credentials ensuring each is registered in the identity inventory mapped to an accountable human owner provisioned with scoped and time-bound entitlements and de-provisioned promptly when the agent model or use case is retired

.

Access Recertification:

• Design execute and track periodic access recertification campaigns ensuring managers/system owners complete reviews on time.
• Monitor and drive closure of remediation actions arising from recertification (e.g. access revocation entitlement clean-up).

Role and Entitlement Management:

• Manage role and entitlement structures including role design role mining/engineering and periodic entitlement clean-up to maintain least-privilege alignment.
• Govern entitlements for AI platforms and agentic tooling covering human access to AI development model and copilot platforms as well as permissions delegated to AI agents on a humans behalf applying least-privilege approval and recertification standards equivalent to those for human access.
• Track Segregation of Duties (SoD) conflicts and other IAM compliance matters escalating and resolving as needed.

Identity Threat Detection and Response (ITDR) Partnership:

• Act as a consulted partner to the ITDR team reviewing identity-related alerts and threat indicators and advising on root cause from an IGA/access perspective.
• Coordinate remediation actions with ITDR (e.g. access suspension credential reset entitlement correction) arising from identity threat incidents.

Governance Audit Assurance and Compliance:

• Manage internal and external audits (including regulatory and internal audit reviews) on IGA-related areas including preparation of evidence discussing issues raised and setting agreed remediation plans.
• Document and communicate IAM policies standards and procedures to stakeholders across the organization.

Automation and Reporting:

• Identify and drive process automation opportunities (e.g. automated recertification workflows self-service access requests) to improve IAM operational efficiency.
• Monitor and report on IAM KPIs/KRIs (e.g. recertification completion rates orphaned accounts dormant access SoD violations) to stakeholders and management.

Incident Response:

• Participate in cyber incident response activities related to identities certificates including compromised or expired certificates and take appropriate corrective action.
• Collaborate with the cyber incident response team to address security breaches involving digital certificates.

What qualifications or skills should you possess in this role

• Degree in Computer Science Information Technology or in other related field of study.
• Minimum 7-9 years of Cyber Security experience with at least 3 years in Identity and Access Management with hands-on exposure to IGA processes (JML recertification role/entitlement management).
• Familiar with managing internal and external audit engagements is a must.
• Familiarity with Identity Threat Detection concepts and experience collaborating with security operations/threat detection teams on identity-related incidents is highly desirable.
• CISSP CIAM or similar professional certifications will be advantageous.
• Must understand or have knowledge of Least Privileged access management methodology.
• Knowledge and exposure in the following areas are essential:
  • Microsoft Active Directory databases and UNIX
  • Amazon Web Services and Microsoft Azure
  • Privileged access management.
  • Managing AI identities
• Experience with IGA tooling (e.g. SailPoint Saviynt or similar) preferred.
• Ability to develop SQL scripts to retrieve data for BAU work.
• Ability to effectively communicate with technical and executive audiences both oral and written is required.
• Experience in financial services industry is preferred.

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious agile and diverse teams - be empowered to push boundaries and pursue innovative ideas share your views and be heard. Be anchored on our PRIME Values: Prudence Respect Integrity Merit and Excellence which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

Flexibility at GIC
At GIC our offices are vibrant hubs for ideation professional growth and interpersonal connection. At the same time we believe that flexibility allows us to do our best work and be our best selves. Thus our teams come into the office four days per week to harness the benefits of in-person collaboration but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer
As an employer we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.

Learn more about our Technology Group here:
Experience:

Senior Exec