Identity & Access Manager

Join to apply for the Identity & Access Manager role at A&O Shearman
.

We have an exciting new opportunity for an Identity & Access Management Manager to join the A&O Shearman Belfast office. This role is responsible for leading the operational delivery of the firm’s Identity and Access Management (IAM) function which encompasses all aspects of access management.

The firm’s ability to keep our clients’ data secure is a bedrock for our reputation as a trustworthy professional services partner to many of the world’s large and prestigious organisations. Information security is not an afterthought; it is core to all that we do, to protect not only our data but that of our clients, and has the unwavering support of the Board.

Led by our new CISO, the in‑house Information Security team is a core part of our technology services structure with mature or evolving capability across all areas of digital security and cyber defence. We align our efforts to the NIST framework and other recognised certifications including ISO
27001 and SOC2 and strive to keep pace with the continually evolving threat landscape, in support of A&O Shearman’s strategy to lead where global complexity creates opportunity. In addition, you will have the opportunity to share and gain intel from the firm’s cybersecurity lawyers. The global team have experience advising clients on hundreds of incidents. Leveraging this experience, they feedback practical lessons learned into clients’ cyber risk management and incident response programmes.

This role ensures the secure, efficient, and compliant provisioning and governance of access, including role based, privileged and conditional access, across systems and data. Reporting to the Head of Digital Trust, the Manager oversees a team of IAM Managers and Analysts and collaborates closely with the Identity and Access Senior Architect to align operational processes with technical solutions. The role plays a critical part in maintaining a robust IAM framework, managing risk, and supporting audit and compliance initiatives.

• Oversee the IAM team in the development, documentation, and maintenance of IAM processes, procedures, and standards, in close collaboration with the IAM Senior Architecture.
• Lead the IAM team in defining and maintaining IAM controls to mitigate access‑related risks and ensure compliance with internal policies and external regulations.
• Orchestrate the IAM team in performing risk assessments, ensuring these are conducted regular to identify and remediate any security gaps.
• Support the implementation of corrective actions in response to audit findings and risk reviews.
• Oversee the day‑to‑day operations of the IAM team, including:
  • Privileged access provisioning, modification, revocation, and review through PAM technology solution;
  • Certification of basic and privileged access across the organisation, ensuring compliance with internal and external standards and requirements.
  • Maintenance of RBAC and entitlement management frameworks.
  • Maintenance of IAM procedural and controls documentation.
  • Continuously evaluate and enhance IAM operations to improve efficiency, security, and user experience.
• Work closely with IAM Architecture and Engineering to orchestrate the implementation of automation and self‑service capabilities to streamline access management workflows.
• Promote awareness and adherence to IAM policies, procedures, and best practices by ensuring these are communicated and disseminated across the firm.

• Experience in a relevant IT Infrastructure or Information Security role.
• Proven track record of operational delivery and experience leading and managing teams in a complex enterprise environment.
• Knowledge and experience with IAM tools and platforms (e.g., Microsoft Entra , Cyber Ark).
• Deep understanding of IAM principles, processes, and technologies, including user access provisioning, role‑based access control (RBAC), and privileged access management (PAM).
• Experience in defining and implementing controls and governance frameworks.
• Strong knowledge of risk management and compliance standards relevant to IAM (e.g., ISO 27001, NIST).
• Background in…