Identity and Access Management; IAM Specialist; f​/m​/d

Based in Zurich and operating within the Group CISO & Technology Risk Control function of the CRO division, this role focuses on shaping our IAM governance to support a clear separation between the first and second line of defence.

• Support the transition of IAM into a mature 2
  
  LoD governance function by helping define challenge mechanisms, monitoring frameworks and escalation practices.
• Contribute to continuous improvement of IAM oversight and control effectiveness.
• Develop and refine the IAM governance framework and support the evolution of the enterprise-wide IAM Operating Model as responsibilities shift to the 1st line.
• Provide independent challenge to ensure policies, standards and the operating model remain risk‑aligned, effective and suited to the Bank’s international context.
• Evaluate the effectiveness of 1
  
  LoD IAM execution and identify required organizational, process and IT adjustments.
• Ensure alignment with IAM policy, architecture.
• Provide oversight of the Business Role Catalogue, Business Contexts and Business‑to‑IT mappings.
• Challenge modelling decisions made by 1
  
  LoD to ensure consistency, least‑privilege design, and adherence to governance and regulatory expectations.
• Offer governance and compliance guidance for new business entities, organizational changes and strategic initiatives.
• Ensure IAM requirements and policies are appropriately integrated into 1
  
  LoD planning and implementation.
• Oversee the effectiveness of Business Role instance assignment processes and challenge unusual or risk‑relevant access situations.
• Monitor key IAM control indicators, supervise 1
  
  LoD remediation activities and strengthen quality gate criteria without taking on execution responsibilities.
• Conduct IAM risk assessments, compliance monitoring and governance reviews.
• Validate policy exceptions and oversee SoD management.
• Provide oversight of IAM‑relevant recertification campaigns and support audits with accurate evidence and insights.

• Strong analytical and data‑driven capabilities with the ability to interpret complex IAM and access‑related data, detect anomalies, and translate insights into governance actions. Experience with analytics or visualization tools is a strong asset.
• Deep understanding of banking business operations, including organizational structures, core processes, client‑facing activities, and how these translate into access requirements. Ability to connect business models with IAM governance needs is essential.
• Solid expertise in IAM governance and access control concepts such as ABAC, segregation of duties, business roles, and identity lifecycle risks, ideally within the financial industry.
• Experience in risk management, compliance, information security or IT controls, with the ability to apply a clear 2nd line of defence mindset and independently challenge 1
  
  LoD decisions and controls.
• Strong knowledge of regulatory expectations related to identity and access governance, operational risk and IT controls in banking.
• Excellent communication and stakeholder management skills, enabling effective collaboration and influence across business, IT and control functions in an international environment.
• Ability to thrive in a transforming environment, contributing to the build‑up of a maturing IAM governance function and helping shape new oversight practices, control mechanisms and challenge routines.
• Proactive, structured and self‑driven working style, with the ability to manage complex topics end‑to‑end while maintaining strong alignment with stakeholders.
• Relevant academic background in Information Security, Computer Science, Risk Management, Business Administration or a related field. Relevant certifications are an advantage.