Head of Access Management Control

Role Overview

Head of Access Management Control at ADIB, Abu Dhabi. This role leads, governs, and continuously enhances the Access Management Control framework across the bank by driving robust Identity Access Management (IDAM) practices, strengthening Segregation of Duties (SoD), and embedding automation, enhancing controls, and governance standards.

Role Purpose

To lead, govern, and continuously enhance the Access Management Control framework across the bank by driving robust Identity Access Management (IDAM) practices, strengthening Segregation of Duties (SoD), and embedding automation, enhancing controls, and governance standards. The role ensures effective stakeholder engagement, regulatory compliance, and optimization of access lifecycle processes across UAE and international operations.

Key Responsibilities

Governance & Control Framework

• Establish and continuously enhance the Access Management Governance Framework, aligned with regulatory expectations and internal policies including RCSA, audit, and compliance.
• Ensure effective implementation of Segregation of Duties (SoD) and principle of least privilege across all systems.
• Lead periodic RCSA reviews, control testing, and assurance reporting for Access Management.
• Drive closure of audit findings, regulatory observations, and control gaps related to IAM.
• Define and enforce access lifecycle controls including joiner, mover, leaver, privileged access, and periodic certification.
• Establish governance over third-party and managed service access controls, ensuring periodic validation and monitoring.

Automation & Digital Enablement

• Drive and own the automation roadmap for Access Management, including IDAM platform enhancements, workflow digitization and straight-through processing, automated access certification and SoD checks, and role mining and intelligent access profiling.
• Lead development of dashboards and MIS reporting (KPIs/KRIs) to provide real-time control visibility.
• Collaborate with IT to embed preventive controls within systems including automated validations and system-enforced SoD.
• Promote data-driven decision-making using analytics for access anomalies, trends, and risk indicators.

Information Security & ITD Collaborations

• Work closely with GISD and ITD to define and enhance enterprise-wide IAM strategy and standards.
• Onboard new applications into IDAM in a controlled and timely manner.
• Define and maintain SoD rulebooks and access risk matrices.
• Implement role mining frameworks and optimization strategies.
• Ensure alignment with GISD on Information Security policies impacting access management, Privileged Access Management (PAM) controls, and identity governance best practices.
• Act as the primary interface between Operations, GISD, and ITD for IAM-related initiatives.
• Support GISD in implementing security-driven enhancements and ensuring compliance with bank-wide security standards.

Access Management Operations

• Oversee end-to-end User Access Management (UAM) operations, including access provisioning, modification, and revocation.
• Review and approve access requests and changes.
• Maintain profiles, roles, and security groups.
• Supervise onboarding of new applications, including defining UAM baseline requirements, performing system testing and control validation pre-implementation.
• Plan and execute periodic access reviews and certifications.

Team Management & Capability Building

• Lead and manage the UAM/IJAM team performance, including goal setting, performance reviews, coaching, capacity planning, and workload allocation.
• Build a strong control culture within the team, ensuring adherence to policies and procedures.
• Develop team capabilities through training programs on IAM, SoD, tools, and regulatory expectations, and through knowledge sharing and continuous learning initiatives.
• Drive succession planning and Emiratization support, where applicable.
• Ensure consistent quality, timeliness, and compliance across all deliverables.

Continuous Improvement & Transformation

• Identify and eliminate manual inefficiencies and redundant controls.
• Lead process re-engineering initiatives to improve turnaround time and control effectiveness.
• Benchmark against industry best practices and implement enhancements accordingly.
• Support centralization and standardization initiatives across geographies.
• Work with stakeholders in enhancing access management processes and controls and onboarding new applications in the IDAM tool.
• Advise and support business units in establishing and maintaining adequate Role-Based Access profiles across operating systems in ADIB UAE and International expansion to demonstrate segregation of duties and authorized system activities according to job roles and responsibilities.
• Conduct supervisory review of user definition and systems access process including setting up new applications, applying change requests of parameterization/configuration, creating new profiles or groups, and maintaining existing profiles, groups, privileges/access rights, and users.
• Support and participate in new systems, enhanced processes, new initiatives, centralization of activities, and handle assigned tasks by Head of BCM&ICD.

Qualifications & Experience

• 12–15 years of progressive experience in Access Management, Identity & Access Management (IAM), and IT Controls, preferably within banking or financial services.
• Proven experience in leading enterprise-wide Access Management or IAM functions, including governance, control design, and operational oversight.

Skills & Competencies

• Strong expertise in Identity & Access Management (IAM/IDAM) frameworks, including user lifecycle management (Joiner–Mover–Leaver), role-based access control (RBAC), and identity governance.
• Proven experience in Access Management Governance frameworks, including RCSA, control testing, audit engagement, and regulatory compliance.
• Hands-on experience with IDAM tools and platforms such as ServiceNow and IAM suites, including application onboarding, access certification, and role mining.
• Advanced stakeholder management and communication skills, with ability to engage Business, ITD, GISD, Risk, Audit, and Compliance functions effectively.
• Demonstrated leadership and team management capability, including performance management, coaching, and capability development.
• Strong process improvement and re-engineering skills, with the ability to identify inefficiencies and drive standardization and control optimization.