IAM Governance and Compliance Specialist

At a glance

Do you want to help deliver a safer and more mature Identity & Access landscape for our colleagues? Do you see Identity & Access not only as a security measure, but also as an enabler for workforce processes and developer journeys? Are you skilled in policies, regulations, controls, and audits, while also being able to explain complex IAM topics in a clear and practical way?

Then we are looking for you!

As an IAM Domain Expert, you support the development and improvement of IAM policies and standards, contribute to control design and monitoring, and assist in audit preparation. You help ensure that IAM capabilities operate in a compliant, secure, and user‑friendly way. You bring functional IAM expertise that helps teams make the right decisions and increase IAM maturity across the bank.

In this role, your primary mission is to strengthen the maturity and compliance of our Identity & Access Management capabilities, with a focus on the workforce domain. You contribute your subject‑matter expertise to ensure IAM processes, controls, and requirements are clearly defined, consistently applied, and aligned with regulatory expectations.

As a Domain Expert, you support the creation and refinement of IAM policies and standards that guide how the bank manages identities, authentication, access & authorization, privileged access management, and related IAM processes. You translate regulatory requirements and market developments into practical and actionable guidance for teams.

You assist in the design and execution of IAM control tests, monitor adherence to standards, and help identify gaps or improvement opportunities. You support audit preparation, coordinate evidence collection, and help address remediation items in collaboration with stakeholders.

You collaborate closely with Product Owners, Capability Owners, and the Data & Insights team to ensure IAM processes are well understood and consistently implemented. You contribute to documentation, guidance, and knowledge‑sharing, helping teams across the bank understand and apply IAM standards correctly.

You will be part of ABN AMRO CISO’s Identity & Access Grid, working within the Workforce Enablement & Control team, specifically in the Audit & Control team.

The Audit & Control team (Domain Experts and Functional Specialists) focuses on policy development, regulatory compliance, risk management, and audit preparation to strengthen IAM security and increase capability maturity.

The Workforce Enablement & control team collaborates intensively with the Workforce IT delivery department to ensure that products and capabilities are technically robust (handled by the IT Delivery department) and meet functional requirements and expectations (handled by Workforce Enablement & Control) for the workforce.

Must-have hard skills for this job:

• Solid understanding of IAM concepts related to:
  Identity, Authentication, Access & Authorization, Privileged Access Management, and API Access.
• Experience with compliance and audit processes (Internal/External Audit, 3
  
  LoD) and exposure to regulatory frameworks such as DORA, GDPR, ISO 27001, NIST.
• Experience with evidence management, issue tracking, and supporting remediation activities.
• Ability to translate IAM requirements, standards, and policies into clear guidance.
• Data literacy: able to read, understand, and interpret IAM KPI/KRI dashboards.
• Strong written communication skills in English (Dutch is a plus).

Must-have soft skills

• Analytical and structured, with strong stakeholder management skills at a tactical level.
• Able to explain IAM topics clearly and translate requirements into practical actions.
• Collaborative, pro‑active, and focused on continuous improvement.
• Comfortable operating as a knowledgeable advisor within your domain.

Nice to haves:

• 5–8+ years of relevant experience in Identity & Access Management or complex enterprise IT environments.
• Certifications such as CISA, CISSP, CISM, ISO 27001, or ITIL.
• Experience with IAM tooling (Azure AD/Entra, SailPoint, Cyber Ark).
• Familiarity with banking processes or regulatory environments.
• Knowledge of cloud platforms (Azure/AWS) and CI/CD…