Assoc. Dir. DDIT ISC Identity & Access Management AD

Job Description Summary We are seeking a hands-on identity security leader who: • Has deep expertise in Active Directory Security and Microsoft Entra ID Security. • Understands identity attack techniques and modern cyber threats. • Has experience securing hybrid identity environments at enterprise scale. • Can influence strategy while remaining technically credible. • Has strong working knowledge of Microsoft 365 security technologies. • Can engage effectively with security leadership, auditors, architects, and engineering teams.   Job Description Key Responsibilities: • Serve as the enterprise subject matter expert and senior technical leader for Microsoft Entra ID, Hybrid Identity, and emerging Agentic Identity security. • Own the security architecture, design, operational governance, and control framework for Microsoft Entra ID, including B2B/B2C, workload identities, and agent identities. • Define and implement identity security standards, hardening baselines, Conditional Access controls, Zero Trust principles, and security guardrails across the identity ecosystem. • Lead identity threat detection, protection, incident response, and recovery, including investigations involving compromised identities, risky users/sign-ins, password-spray attacks, and other identity-based threats. • Identify and remediate identity security weaknesses and attack paths, partnering with Cyber Defense and SOC teams to strengthen detection and response capabilities. • Govern privileged access, administrative accounts, application onboarding, provisioning, and identity lifecycle controls across large-scale enterprise environments. • Establish and track identity security KPIs, KRIs, control effectiveness, operational health, and risk-reduction metrics, providing clear updates to security leadership. • Provide technical leadership for complex, multi-year identity transformation initiatives, resolving architectural and operational roadblocks and driving secure, scalable solutions. • Support internal and external audits, regulatory requirements, and compliance reviews by ensuring identity controls, evidence, and governance processes are effective and audit-ready. • Drive operational excellence through automation, engineering discipline, continuous improvement, innovation, and adoption of emerging identity-security capabilities. Essential Requirement : • 10–12+ years of experience in enterprise Identity and Access Management, with significant hands-on responsibility for large-scale Microsoft Entra ID and hybrid identity environments. • Deep technical expertise in Microsoft Entra ID security, including Conditional Access, External Identities, Identity Protection, Identity Governance, privileged access, application integration, and provisioning technologies such as SCIM. • Strong knowledge of Identity Threat Detection and Response (ITDR), identity attack techniques, prevention controls, incident response, and recovery strategies. • Proven experience designing and implementing identity controls aligned with Zero Trust architecture, security governance, and enterprise risk-management principles. • Demonstrated ability to lead complex, multi-year identity-security programmes as a senior technical expert, resolving architectural challenges and translating strategy into practical solutions. • Experience operating in a large, highly regulated enterprise environment, with a strong understanding of audit, compliance, control design, and evidence requirements. • Ability to analyse identity-security data, identify risks and attack paths, define remediation priorities, and communicate technical risks clearly to senior stakeholders. • Strong stakeholder-management and leadership skills, with the ability to engage effectively with security leadership,