Assistant Lead,Workforce & Identity Security Job Singapore,IT/Tech

Purpose of the role

You are the person who ensures the right workforce has the right access to the right resources.

Scope of the role

Identities & Accounts – Employees, contractors, vendors, service accounts and application identities across multiple directories and HR systems
Access Control – Role‑based access (RBAC), attribute‑based access (ABAC), segregation of duties (SoD), and entitlements for business and privileged users
IAM Platforms – Enterprise IAM solutions (e.g., SailPoint, Saviynt, Oracle IAM, Azure AD / Entra , Okta or similar) covering identity lifecycle, SSO and federation
PAM Platforms – Cyber Ark or equivalent vaulting and session‑monitoring solutions for privileged and sensitive accounts
Processes & Governance – Joiner‑mover‑leaver (JML), recertification, access reviews, break‑glass processes and exception handling
Zero Trust & Workforce Security – MFA, adaptive authentication, conditional access, device and contextual signals that underpin an identity‑centric security model

Key responsibilities

Strategy & Target Operating Model – Define and maintain the Workforce & Identity Security strategy and roadmap, aligned with Cyber Defence & Resilience, Zero Trust and CSA Cyber Trust Mark requirements.
Design the target operating model for IAM & PAM – roles and responsibilities, RACI, processes, tooling and integration patterns.
Translate business and regulatory requirements into clear identity control objectives and practical implementation plans.
Architecture, Design & Technology Ownership – Own the end‑to‑end IAM & PAM architecture, including directories, identity stores, SSO, federation, MFA, just‑in‑time provisioning and adaptive authentication.
Set architectural standards for integration of applications and systems into IAM/PAM platforms (connectors, APIs, SCIM, SAML/OIDC/OAuth, RADIUS).
Lead design and deployment of role and attribute models (RBAC/ABAC) that support least privilege while remaining maintainable and understandable.
Ensure designs support hybrid and multi‑cloud environments, remote work, and third‑party access scenarios.
Lead multi‑year IAM/PAM and identity‑first security uplift programmes.
Manage full lifecycle of programmes: requirements, design, build, test, migration, stabilisation and handover to BAU using Agile or hybrid methodologies.
Coordinate cross‑functional squads and drive application onboarding at scale.
Governance, Operations & Continuous Improvement – Own and continuously improve JML, access request/approval, recertification and SoD processes.
Define and monitor KPIs/KRIs for IAM/PAM (orphan accounts, dormant privileged accounts, recertification completion, policy violations, number of manual exceptions).
Ensure operating procedures, runbooks and playbooks are in place.
Incident Management & Assurance – Senior escalation point for identity‑related incidents, coordinate with SOC and other teams.
Provide evidence for internal and external audits, red‑team exercises, regulatory inspections.
Validate IAM/PAM controls against NIST, ISO 27001 and Cyber Trust Mark control sets.
Leadership & Stakeholder Engagement – Trusted advisor to senior leaders on identity, workforce and privileged access risks.
Drive user‑centric change management to improve security behaviours without degrading productivity.

You Will Work Closely With

HR, IT Operations, Application Owners, Cloud Engineering and Enterprise Architecture.
Cyber Fusion / SOC (identity‑related monitoring & response) and Exposure & Vulnerability Management.
Internal Audit, Risk & Compliance and external regulators.

Key Challenges You'll Tackle

Harmonising identity and access across legacy on‑prem systems, modern cloud platforms and diverse third‑party services.
Automating and simplifying controls to reduce manual work while maintaining strong governance and auditability.
Balancing business demands speed and convenience with robust enforcement of least privilege and SoD.

Foundational Competencies

Demonstrate strong strategic thinking and articulate an identity‑first security vision.
Influence and negotiate at senior levels, resolve tensions between security, usability and delivery timelines.
Lead complex programmes and cross‑functional…

Assistant Lead, Workforce & Identity Security