About the role:

Lead the delivery of secure, scalable Identity and Access Management (IAM) and Privileged Access Management (PAM) projects ,ensuring alignment with regulatory, risk, and business objectives. Drive identity modernisation, strengthen access controls, and ensure compliance through effective governance, stakeholder engagement, and end-to-end execution

Key Responsibilities:

• Lead the end-to-end delivery of cybersecurity and identity transformation programmes within a highly regulated banking environment, focusing on IAM, PAM, and Zero Trust architectures aligned to enterprise security strategy.
• Drive key initiatives including Unstructured Data Access Governance (Folder Access Management), Audit & Regulatory Remediation, and Enterprise Password & Authentication Modernisation to meet internal audit and external regulatory expectations.
• Provide hands-on leadership across Identity Lifecycle Management, Privileged Access Controls, Data Security, and Cloud Identity (Entra ID / Azure AD) ensuring secure access across hybrid and multi-cloud environments.
• Deliver large-scale rollout and adoption of Multi-Factor Authentication (MFA), passwordless authentication, and strong customer/employee authentication controls, ensuring compliance with banking regulations (e.g., PSD2 SCA where applicable).
• Oversee integration of identity systems, including Active Directory, Entra ID, ARS, and cloud platforms, ensuring secure interoperability and adherence to least-privilege principles.
• Lead cross-functional teams (security, infrastructure, application, risk, compliance, and third-party vendors) to deliver programmes against scope, budget, timelines, and quality standards in complex banking environments.
• Ensure adherence to regulatory, audit, and risk frameworks (e.g., PRA/FCA expectations, SOX controls, internal audit findings), including delivery of PKI / Certificate Authority and cross-entity trust solutions.
• Establish and manage risk, dependency, and control frameworks, ensuring timely remediation of vulnerabilities, audit gaps, and control deficiencies.
• Produce and present executive-level reporting, including KPIs, KRIs, risk posture, and programme health to senior stakeholders, risk committees, and governance forums.
• Drive standardisation, automation, and continuous improvement across cyber delivery practices, embedding secure-by-design and Zero Trust principles across the bank.

Key Skills/Experience:

Essential

• Proven experience delivering IAM, PAM, or Zero Trust Programmes within banking or financial services.
• Strong expertise in Entra ID (Azure AD), Active Directory, OCI IAM, and modern authentication (MFA, SSO, Conditional Access, passwordless).
• Hands-on experience with IAM and Privileged Access Management solutions (e.g., CyberArk, Delinea, BeyondTrust) in regulated environments.
• Experience implementing Identity Governance & Administration (IGA), access certification, RBAC/ABAC models.
• Exposure to PKI, Certificate Lifecycle Management, HSM integration, and enterprise Certificate Authority deployments.
• Strong understanding of banking regulatory frameworks and security standards, including: 
• FCA / PRA regulatory expectations or understanding.
• ISO 27001, NIST, CIS benchmarks
• SOX ITGC controls and audit processes
• Experience operating within Agile, SAFe, or hybrid delivery models, with certifications such as PMP, PRINCE2, or SAFe Agilist.

Value Add 

• Experience supporting regulatory audits, internal audit remediation, and risk/compliance engagements.
• Strong understanding of Zero Trust, least privilege, and segregation of duties (SoD) in financial systems.
• Experience delivering identity transformation in cloud migration or digital banking programmes.
• Ability to communicate complex technical concepts to risk, audit, and executive stakeholders.
• Prior experience working with global banking environments, multi-entity structures, and cross-border identity controls.

MUFG is committed to diversity and inclusion, valuing all employees and opposing discrimination based on age, gender, sexual orientation, disability, race, religion, or any other protected characteristic. Recruitment decisions are made fairly, focusing on the right skills for the role. This temporary assignment will be working at MUFG, and may involve working at an MUFG site, you will however be contracted through Magnit Global, a UK registered employment business with the company registration number 05537535.

Magnit Global is a leading, global professional services and technology company. We have been a leader in contingent workforce management since 1991 and work with leading Fortune 500 companies and other large organizations across numerous verticals including consumer electronics, research and development, pharmaceuticals, health services, and many more. To do our best work we need different viewpoints. Therefore, we celebrate diversity and embrace inclusion. As an equal opportunity employer, we are dedicated to building a team that represents a variety of backgrounds, perspectives, and skills. We strive to ensure that we maintain a positive and enriching work environment for all.