Senior Identity and Access Control Lead

Location: Greater London

Senior Identity and Access Control Lead page is loaded## Senior Identity and Access Control Lead locations:
Cambridge, United Kingdom:
London Cannon Streettime type:
Full time posted on:
Posted Todaytime left to apply:
End Date:
January 12, 2026 (2 days left to apply) job requisition :
R011844
** AVEVA is creating software trusted by over 90% of leading industrial companies.
***
* Job Title:

** Senior Identity and Access Control Lead
*
* Location:

Cambridge / London
***
* Employment Type:

** Full-time
** The job
** The Senior Identity and Access Control Lead is responsible for overseeing the governance of user access controls across AVEVA’s business-critical systems and is accountable for executing identity lifecycle processes across in-scope platforms, ensuring provisioning, de-provisioning, periodic reviews, and privileged access are properly documented, risk-assessed, and compliant with internal control requirements. This includes leading regular access reviews, coordinating identity-related ITGCs, and ensuring that the evidence produced using fully automated solutions supports PCAOB/SOX compliance and audit readiness.

The role will work closely with the IDAM programme, platform teams, control owners, and auditors to ensure identity-related risks are appropriately managed and access processes are operated in a secure, consistent, and compliant manner. The successful candidate must maintain audit readiness through automated generation of audit reports and data, rather than producing evidence reactively during audits.
** Key responsibilities
*** Lead execution of identity lifecycle processes including user provisioning, de-provisioning, and Joiner-Mover-Leaver (JML) workflows
* Enforce role-based access control (RBAC), segregation of duties (SoD), and provisioning standards across enterprise systems
* Coordinate periodic access reviews, privileged access monitoring, and emergency/firefighter access governance
* Maintain audit-ready documentation and demonstrate operational effectiveness of access control processes
* Drive automation of identity controls, evidence collection, and reporting to improve efficiency and compliance
* Collaborate with application owners, control stakeholders, and internal/external auditors to validate identity-related ITGCs
* Recommend improvements to strengthen access governance, documentation, and evidence traceability
* Mentor junior access control analysts and contribute to establishing a sustainable Identity Control capability within the first line of defence
* Guide stakeholders on access control standards and remediation activities
* Leverage AI tools and techniques to optimise day-to-day tasks, reporting, and control monitoring
** Essential requirements
*** Lead execution of identity lifecycle processes including user provisioning, de-provisioning, and Joiner-Mover-Leaver (JML) workflows
* Enforce role-based access control (RBAC), segregation of duties (SoD), and provisioning standards across enterprise systems
* Coordinate periodic access reviews, privileged access monitoring, and emergency/firefighter access governance
* Maintain audit-ready documentation and demonstrate operational effectiveness of access control processes
* Drive automation of identity controls, evidence collection, and reporting to improve efficiency and compliance
* Collaborate with application owners, control stakeholders, and internal/external auditors to validate identity-related ITGCs
* Recommend improvements to strengthen access governance, documentation, and evidence traceability
* Mentor junior access control analysts and contribute to establishing a sustainable Identity Control capability within the first line of defence
* Guide stakeholders on access control standards and remediation activities
* Leverage AI tools and techniques to optimise day-to-day tasks, reporting, and control monitoring
** Desired skills
*** Certifications such as CIAM, CAMS, CRISC, or equivalent
* Experience supporting PCAOB/SOX readiness programs in regulated environments
* Exposure to identity access governance platforms or user provisioning tools
* Understanding of GDPR, cloud access models, or data access risk
* Knowledge of ITIL, NIST, or…