Identity & Access Management Compliance Lead (IAM)
Decipher Bureau
About the Company
We are partnering with a leading Australian organisation. With a large-scale retail and healthcare network, a complex hybrid infrastructure, and a highly regulated operating environment, they sit at the intersection of critical delivery and enterprise-grade IT. It's an exciting time to join, as the business is investing heavily in maturing its identity and access management capability.
About the Role
This is a greenfield opportunity - you won't be inheriting a mature framework or a dusty controls spreadsheet. You'll be building the identity compliance function from the ground up, and owning the outcome end-to-end.
This IAM Compliance Lead role is a pivotal position within the broader IAM strategy. You'll own the identity compliance program - accountable for designing and implementing the controls framework, running access review processes, and ensuring alignment to regulatory and industry standards. This isn't an engineering role. It's a strategy and program leadership role for someone who understands not just how to execute compliance, but why it matters.
Your Responsibilities
- Build and own the IAM controls framework, aligned to NIST and applicable regulatory standards
- Design and implement User Access Review (UAR) and Privileged Access Review (PAR) processes from scratch
- Work closely with the IAM Product Owner to inform and shape the evolving IGA platform (Entra ID Governance currently in place; broader stack including SailPoint and Saviynt under consideration).
- Lead the identity compliance program independently - setting the agenda, driving delivery, and reporting on outcomes
- Act as the internal voice and authority on identity compliance across the organisation
- Bridge the gap between compliance requirements and technical delivery teams
Experience Required
- 5+ years of experience in identity - spanning governance, compliance, administration, or a combination.
- Strong understanding of IAM compliance frameworks with NIST experience
- Experience designing and running UAR and PAR programs
- Solid IGA conceptual knowledge - platform experience across SailPoint, Saviynt, Okta, or Microsoft Entra ID Governance is highly regarded.
- A track record of leading programs of work with clear delivery timeframes and measurable outcomes
- Comfortable operating independently in an ambiguous, greenfield environment
- Able to clearly articulate what an identity framework is, how it connects to business risk, and why it matters - to both technical and non-technical audiences
Highly regarded
- Auditing background with experience in APRA-regulated or similarly regulated environments
- Experience operating in large, complex organisations
Why This Role?
This role starts as an individual contributor, with a clear pathway into leadership as the compliance function matures. Your delivery in the first 12 months will directly shape that trajectory.
If you've developed a career at the intersection of identity and compliance - and you're ready to build a function rather than just fill a role - we want to hear from you.
How to Apply
Click apply or submit your CV to ***email_hidden*** or [email protected] for a 100% confidential, informal conversation where your privacy will absolutely be respected.