IAM Continuous Assurance Manager (Brazil based only)

As a leader within the Identity & Access Management (IAM) department of the Experian Global Security Office, you will lead a team responsible for evolving the IAM assurance model from periodic assessments to a continuous, risk-based monitoring approach across critical systems. You will define the IAM assurance framework and reporting approach, with a particular focus on Identity Governance & Administration (IGA) and Privileged Access Management (PAM) controls, partnering with IAM Engineering teams to automate control testing, validations, and evidence collection.

About Experian

A Serasa Experian é muito mais do que você imagina.

Com o propósito de criar um futuro melhor, ampliando oportunidades para pessoas e empresas, no Brasil somos mais de 4 mil pessoas que atuam em diversos times e especialidades.

Aqui, cada conhecimento e diversidade se complementa e você pode trabalhar no que mais ama, estamos comprometidos a construir uma cultura inclusiva e um ambiente no qual pessoas possam equilibrar a carreira com seus compromissos e interesses pessoais, prezando pelo bem-estar.

A gente se dedica muito em ser uma das melhores e mais inovadoras empresas para se trabalhar do país, possibilitando experiências e carreiras incríveis para nossas pessoas.

Nossa forte abordagem de pessoas em primeiro lugar é reconhecida externamente por meio de diversas certificações de mercado: fomos premiados pelo

Place To Work™ em 24 países e pela certificação internacional

Cada reconhecimento nos indica que estamos no caminho certo, proporcionando um ambiente de trabalho cada vez melhor para nossos talentos.

Experian Careers - Creating a better tomorrow together Find out what its like to work for Experian by clicking here Experian Careers - Creating a better tomorrow together Find out what its like to work for Experian by clicking here

A Experian é uma empresa global de dados e tecnologia que impulsiona oportunidades para pessoas e empresas ao redor do mundo.

Atuamos em diversos mercados, como serviços financeiros, saúde, automotivo, agronegócio, seguros, entre outros.

A Experian investe em pessoas e em novas tecnologias avançadas para liberar o poder dos dados.

Contamos com uma equipe incrível de 25.200 colaboradores em 32 países.

Nossa singularidade é valorizar a sua.

A cultura da Experian, centrada nas pessoas, inclusiva e orientada por propósito, é reconhecida por diversos prêmios — incluindo World’s Best Workplaces™ 2025 (Top 25 global da Fortune) e Great Place To Work™ em 26 países, entre outros.

Confira o Experian Life nas redes sociais ou explore nosso site de carreiras para entender o porquê.

A Experian também se orgulha de ser uma empregadora que promove igualdade de oportunidades e ação afirmativa.

Responsibilities

• You will work closely with control owners to investigate access-related risks, coordinate remediation activities, and improve control effectiveness.
• You will also coordinate assurance activities with Internal Audit, Risk Management, and Compliance teams, ensuring clear accountability and the appropriate level of independence.
• By leveraging data, analytics, automation, and approved AI capabilities where appropriate, you will help expand monitoring coverage, identify issues earlier, strengthen compliance, and reduce manual effort.
• You will lead the IAM Assurance operating model and promote effective identity governance, privileged access controls, and continuous assurance practices across the organization.
• Lead the design, implementation, and continuous improvement of IAM Continuous Assurance, including automated control monitoring, risk analysis, exception management, ongoing control validation, and assurance reporting.
• Establish and continuously assess assurance controls related to IGA and PAM, ensuring identity governance, privileged access, and supporting processes operate effectively and that control deficiencies are identified and remediated.
• Define and monitor controls related to identity lifecycle management, access requests and approvals, role-based access control, privileged access, segregation of duties, and periodic access reviews.
• Build repeatable testing and monitoring processes using IAM, HR, IT Service Management, directory, and application data; partner with IAM Engineering to automate control testing and evidence collection through analytics, workflow tools, and approved AI capabilities where appropriate.
• Serve as a subject matter expert in IGA and PAM assurance, including the evaluation of governance processes, technical controls, operational practices, exceptions, and control evidence.
• Identify inappropriate or excessive access, control failures, overdue access certifications, orphan accounts, policy exceptions, privileged access risks, and other identity-related risks; perform root cause analysis and coordinate remediation through to completion.
• Develop risk-based monitoring approaches focused on critical applications, privileged identities, high-risk access, control exceptions, and other material identity-related risks.
• Lead and develop the IAM Assurance team by setting clear objectives, priorities, and performance expectations while building capabilities in risk, controls, assurance, and data-driven decision making.
• Define and maintain the IAM Assurance operating model, ensuring clear accountability, appropriate independence, effective governance, and alignment with organizational frameworks.
• Provide technical and domain leadership in IAM governance, IGA, PAM, access control, and relevant frameworks such as ISO 27001; influence policies, standards, and best practices while remaining current on IAM technologies and industry trends.
• Partner with Internal Audit, Risk, Compliance, Technology, and business stakeholders; oversee relevant audit engagements, maintain IAM governance metrics and reporting, and support audit readiness and timely remediation efforts.
• How Success Will Be Measured IAM control issues are identified early, assigned to clear owners, and resolved within agreed timelines.
• The effectiveness of IGA and PAM controls is measurable, with increasing automation of monitoring for critical and high-risk controls.
• Access reviews are completed on time with reliable evidence and proper exception management.
• Privileged access risks and exceptions are identified through repeatable monitoring processes and managed through defined remediation procedures.
• Monitoring coverage extends across critical systems and high-risk access, with a continuous reduction in manual gaps.
• Audit requests are supported by complete, consistent, and traceable evidence.
• Leadership receives timely reporting that enables effective understanding and management of IAM risks.
• Control improvements reduce recurring findings, unnecessary access, and avoidable exceptions.

Requirements

• Strong knowledge of Privileged Access Management (PAM), including privileged account discovery and onboarding, credential management, access approvals, privileged session controls, least privilege principles, and reducing standing privileged access.
• Experience assessing the design and operational effectiveness of IGA and PAM controls, identifying control gaps, and translating findings into sustainable corrective actions.
• Experience with IAM platforms such as SailPoint, Okta, CyberArk, AWS, or Microsoft Entra ID, or equivalent technologies.
• Knowledge of security and risk management frameworks such as ISO 27001, NIST, PCI DSS, and Zero Trust, with the ability to translate requirements into effective IAM controls.

Preferred

• Advanced English; Experience in IAM, security assurance, IT risk, audit, or a related discipline, including experience leading teams or programs.
• People management experience is strongly preferred.
• Experience designing, implementing, or operating Continuous Assurance, Continuous Controls Monitoring (CCM), automated compliance monitoring, or data-driven assurance programs.
• Strong hands-on or governance experience in Identity Governance and Administration (IGA), including joiner/mover/leaver processes, access certifications, role-based access control, privileged access, and segregation of duties.
• Experience managing assurance or audit activities, with a strong understanding of accountability, independence, constructive challenge, and remediation practices.
• Ability to analyze identity and access data to identify exceptions, trends, and control weaknesses; experience with SQL, scripting, or reporting tools is considered an advantage.
• Skills Experience implementing, operating, or providing assurance over SailPoint and CyberArk environments is highly desirable.
• Experience using automation, analytics, workflow tools, or RPA to improve assurance processes; familiarity with approved AI or GenAI use cases is an advantage.
• Experience defining KRIs, KPIs, control health metrics, exception reporting, and executive IAM risk reporting is considered a plus.
• Strong communication, project management, and stakeholder management skills, including the ability to provide constructive challenge and explain risk to diverse audiences.
• CISSP, CISM, or other relevant cybersecurity certifications are considered an advantage.

Benefits

• Top Employers, além de sermos reconhecidos como uma das melhores empresas para jovens profissionais e contarmos com uma avaliação de 4,6 no Glassdoor.