Cyber Security Identity & Access Manager

Cyber Security Identity & Access Manager

Sector Technology Role Manager Contract Type Permanent Hours Full Time

Shape a trusted, enterprise-wide identity and access capability that protects critical systems while enabling people to work securely and effectively.

Laing O'Rourke's IT function has renewed its strategy to support the company's ambition to transform the construction industry, making it more sustainable, more productive, and fit for the future.

Technology has a critical role to play in achieving this ambition. Our focus is on applying digital capability in ways that genuinely matter, shaping how complex projects are delivered, how decisions are made, and how innovation improves outcomes for people, communities, and the environment.

Our mission is clear: to create a modern and resilient technology environment where trusted data informs every decision, AI enhances every process, and digital capability enables the organisation to operate with greater scale and productivity.

To deliver this, we are building a different kind of IT function, one that is trusted by the business, forward looking in its thinking, and deeply connected to operational outcomes. We are looking for individuals who are curious, thoughtful, and motivated by contributing to work that has real industry impact.

As Cyber Security Identity & Access Manager, you will be responsible for developing and leading our Identity and Access Management (IAM) capability. You will ensure that the right people have access to the right resources at the right time, balancing effective security controls with an efficient user experience. Working across cyber security, IT, business teams and external partners, you will support the delivery of our zero trust security strategy, regulatory obligations and digital transformation initiatives.

• Define and evolve the IAM strategy, roadmap and operating model to meet current and future business needs.
• Develop IAM frameworks, policies and standards that support compliance with ISO 27001, Cyber Essentials Plus, Essential Eight and related requirements.
• Guide identity lifecycle management processes, including Joiners, Movers and Leavers, ensuring effective provisioning, modification and removal of access.
• Establish governance for authentication, authorisation and access control, including role-based and attribute-based access models.
• Identify automation and continuous improvement opportunities across IAM processes and technologies.
• Ensure IAM controls align with business risk requirements, cyber security policies and regulatory obligations.
• Collaborate with technology and business stakeholders to deliver secure, reliable and compliant identity solutions.

• Proven experience designing, implementing and managing enterprise-scale IAM programmes.
• Strong knowledge of Identity Governance and Administration (IGA), Role-Based Access Control (RBAC) and Privileged Access Management (PAM).
• Experience implementing and managing Joiner, Mover and Leaver processes and access certification reviews.
• Expertise in authentication technologies, including Single Sign-On (SSO), Multi-Factor Authentication (MFA) and passwordless authentication.
• Effective stakeholder engagement skills, with the ability to communicate technical and compliance concepts clearly and practically.
• Ability to take accountability, work collaboratively and deliver measurable outcomes.

• Professional certifications such as CISSP or CISM.
• Experience implementing IAM platforms such as SailPoint, Entra , Okta or Cyber Ark across cloud and on-premises environments.
• Experience working within large, complex and multidisciplinary organisations.

This is a key role…