Manager, IT Security / IAM Specialist
Summary
Manager-level IT security role centered on identity and access management: designing the joiner–mover–leaver lifecycle via SailPoint into Active Directory/Entra ID, governing privileged access in CyberArk, running access reviews, MFA/SSO/Conditional Access policies, and feeding identity logs to Splunk SIEM, while keeping evidence aligned with ISO 27001, OIC and PDPA.
Key responsibilities:
Design, configure and maintain identity lifecycle processes (Joiner–Mover–Leaver), connecting HR as the authoritative source through IAM system/SailPoint to Active Directory, Entra ID and in-scope applications
Lead role mining, role design and access modelling with application owners, enforcing least privilege and segregation of duties
Oversee privileged account governance and troubleshooting in CyberArk, including vaulting, PSM session management, credential rotation, service and break-glass accounts
Run regular access reviews (line manager, high-privilege and application-level) and track revocations through to closure
Govern MFA, SSO and Entra ID Conditional Access policies, application consent requests and third-party/vendor access
Ensure IAM and PAM logs are sent to the SIEM (Splunk) and support the GSOC with identity-related alerts, investigations and incident response
Keep IAM standards, procedures and evidence aligned with Group policy, ISO/IEC 27001, OIC requirements and PDPA
Act as the IAM point of contact for audits
Lead IT security projects and coordinate with vendors, contractors, business and tech
Report status, risks and decisions to management in clear business language
Qualifications:
Bachelor's degree or higher in Computer Science, Information Security, MIS or a related field
At least 7 years of experience in IT/cybersecurity, including at least 4 years in hands-on IAM engineering or IAM governance
Hands-on experience with an Identity Governance & Administration (IGA) platform (e.g., SailPoint) and a PAM solution (e.g., CyberArk)
Strong working knowledge of Active Directory and Microsoft Entra ID (Conditional Access, PIM, app registrations)
Strong working knowledge of federation and SSO protocols (SAML, OAuth 2.0/OIDC, SCIM)
Proven experience delivering RBAC, access certification and automation
Familiarity with ISO/IEC 27001, NIST CSF, the OIC IT Risk Guidelines and PDPA
Experience in insurance, banking or financial services is preferred
Preferred certifications: CISSP, CISM, SailPoint Certified Engineer, or Microsoft SC-300
Thank you for your job application with Prudential Life Assurance (Thailand) Public Company Limited.
To align with Prudential Group Employee Privacy Notice, candidate acknowledged the record and usage of candidate’s personal details to Prudential Life Assurance (Thailand) Public Company Limited and its business partner for recruitment purpose.
See more detail https://www.prudential.co.th/corp/prudential-th/en/privacy-notice-staff/
Refer to Prudential Life Assurance (Thailand) Public Company Limited’s Privacy notice regarding recruitment at https://www.prudential.co.th/corp/prudential-th/th/privacy-notice-staff/, and please be informed that company conducts criminal background checks for all positions during the hiring process.