• Run discovery and current-state assessment; produce the criticality tiering, wave plan and baseline improvement plan
• Author the governance set: Access Management Policy, Operating Model, Standard, RBAC Model, Naming Standard, User Access Matrix Standard, SoD Framework
• Author the procedure set: JML, Access Request & Approval, Privileged Access, Break-Glass, Non-Human Accounts, User Access Review, Exception & Risk Acceptance
• Deliver IAM platform and PAM governance review reports with improvement plans
• Produce Access Control References for Active Directory, database, application, and integration layers
• Produce business-validated User Access Matrices with named owners, plus Tier 1 SoD rulesets
• Design and run certification campaigns, maintain the remediation tracker, operate KPIs/KRIs
• Issue monthly governance reports and dashboard; chair the governance forum and hand it over to Bahri

**Required skills**

• Enterprise IGA platform (SailPoint / Saviynt / One Identity / Entra ID Governance)
• PAM platform (CyberArk / Delinea / BeyondTrust)
• Active Directory — groups, privileged groups, GPO, tiering, service accounts
• Database access models (Oracle / SQL Server / PostgreSQL)
• Integration layer — service accounts, API credentials, secrets management
• PowerShell, SQL, advanced Excel, Power BI