Privileged Access Management; PAM) Lead

Excited to grow your career? Our purpose is to make it easy for people to save and invest for a better future. We are looking for great people to join us, so please come and invest in YOUR future at Hargreaves Lansdown. We know that sometimes people can be put off applying for a job if they don't tick every box.

If you're excited about working for us and have most of the skills or experience we're looking for, we’d love to hear from you!

The PAM Lead is responsible for providing technical leadership, strategic direction and subject matter expertise across Privileged Access Management (PAM) services. This role will lead the design, implementation, operation and continuous improvement of HL's PAM capabilities, ensuring privileged access risks are effectively managed while enabling colleagues to work efficiently and securely. As the senior technical specialist within the PAM function, you will be responsible for defining standards, driving best practice, supporting complex technical delivery and acting as a key escalation point for privileged access services.

The role has a particular focus on Cyber Ark Privilege Cloud, Endpoint Privilege Manager (EPM), secrets management, machine and non-human identities, and the broader privileged access ecosystem. The role will also provide leadership and mentoring for PAM engineers and analysts, helping develop technical capability within the team whilst driving operational excellence and service maturity.

• Act as the technical lead and primary SME for Privileged Access Management technologies, processes and controls.
• Own the technical roadmap for PAM services, ensuring alignment with HL's security strategy and risk management objectives.
• Lead the continuing optimisation of Cyber Ark Privilege Cloud and Endpoint Privilege Manager (EPM) implementations.
• Develop and maintain strategies for securing privileged accounts, service accounts, machine identities and other non-human identities.
• Provide technical leadership for PAM-related projects, enhancements and operational initiatives.
• Act as the highest technical escalation point for PAM incidents, issues and complex troubleshooting activities.
• Define and maintain PAM architecture standards, engineering patterns and operational procedures.
• Collaborate with Infrastructure, Cloud, Application Development, Security Operations and Risk teams to deliver secure access solutions.
• Support audits, regulatory reviews and control assessments, providing evidence and guidance where required.
• Monitor emerging threats, vulnerabilities and industry best practice to ensure PAM controls remain effective and relevant.
• Provide technical mentoring, coaching and development support for PAM Engineers and Analysts.
• Support resource planning, workload prioritisation and performance management activities within the PAM team where required.
• Contribute to the wider Identity & Access Management strategy and roadmap.
• Build strong relationships with stakeholders across Technology, Security and Business functions.
• Challenge existing processes and technologies, driving continual improvement and innovation.

Extensive experience in Privileged Access Management within complex enterprise environments – ideally within financial services. Demonstrable hands-on experience administering and engineering Cyber Ark Privilege Cloud. Strong experience with Cyber Ark Endpoint Privilege Manager (EPM). Experience implementing and managing secrets management solutions for applications, cloud platforms and infrastructure services. Strong understanding of service accounts, machine identities, API credentials and wider non-human identity security principles.

Good understanding of Identity and Access Management concepts including…