Lead IAM Security Expert

Security is a core pillar of our business, and our Information Security Advisory & Testing function plays a critical role in enabling secure growth across the organisation. The Security Advisory team acts as an internal consulting partner, providing expert guidance on data security, identity governance, and modern Data Security Posture Management (DSPM). We work closely with Corporate Systems, engineering teams, product owners, and business stakeholders to ensure that sensitive data is properly classified, protected, and governed across the enterprise. The team is structured across two core domains: Identity & Access Governance (internal access control and identity management) and Data Security & DSPM (data classification, data flow visibility, and data leakage prevention). Together, we strengthen the company’s data security posture and promote responsible data usage across all functions.

As the Lead IAM Expert, you will define and drive the strategic direction of our data-centric security program. Reporting to the VP, Information Security Advisory & Testing, you will lead a specialised global team and act as a senior internal consultant on data protection, identity governance, and secure architecture. This role combines leadership, advisory, and hands-on expertise. You may lead a team of security professionals or operate as a senior individual contributor, depending on your profile and strengths. In either case, you will own and evolve our data security strategy while strengthening collaboration across corporate technology and product environments.

• Manage and mentor a team of security professionals, fostering accountability, technical excellence, and continuous development across identity and data security domains.
• Define, evolve, and execute the company’s data classification and data protection strategy, ensuring alignment with broader security and business objectives.
• Oversee implementation and continuous improvement of Data Security Posture Management (DSPM) capabilities, ensuring visibility into sensitive data locations, flows, and risks.
• Drive initiatives to identify how data moves across systems, detect potential leakage vectors, and implement controls to reduce risk.
• Provide strong leadership in identity management and internal access control, ensuring appropriate governance over privileged and business-critical access.
• Partner with Corporate Systems, engineering, and product teams to embed secure-by-design principles into new initiatives and technology transformations.
• Act as a senior advisor to internal stakeholders on secure data handling, architecture decisions, and regulatory compliance considerations.
• Develop high-quality dashboards, risk metrics, and executive-level reporting to provide visibility into data security posture and risk trends.
• Identify, evaluate, and prioritise data security risks across systems and workflows, ensuring clear remediation ownership and cross-functional execution.
• Serve as the primary point of contact for data security matters, promoting awareness, driving process improvements, and strengthening a culture of responsible data use.
• Stay current on emerging technologies, regulations, and industry best practices in data security, DSPM, and identity governance, ensuring our controls remain robust and forward-looking.

• 8–10+ years of experience in cybersecurity, with strong focus on data security, data governance, cloud security, or identity management (required)
• Strong knowledge of data classification models and data lifecycle management (required)
• Hands-on experience with DSPM concepts and tooling (required)
• Experience collaborating with enterprise IT / Corporate Systems and product teams (required)
• Deep understanding of identity governance and internal access control mechanisms (required)
• Strong understanding of risk management principles across cloud and on-prem environments (required)
• Proven experience leading teams or security programs, ideally within data-focused or governance-driven environments is a plus (preferred)
• Excellent communication and presentation skills, including executive-level reporting (required)
• Fluency in English (required)
• Experience with DSPM platforms, DLP technologies, or data governance frameworks (preferred)
• Knowledge of regulatory requirements related to data protection (e.g., GDPR, ISO 27001, SOC) (preferred)
• Background in internal advisory, architecture reviews, or technical project leadership (preferred)
• Certifications such as CISSP, CISM, CCSP, or equivalent (preferred)

• A collaborative environment with colleagues from all over the world (Engineering offices in Europe, Asia and US)
• Ability to shape your own workday and career via a clearly defined professional and personal development plan
• Opportunity to work with senior leadership team and develop yourself within an inspiring and fast-growing company
• Vibrant and inclusive community, including Women in Tech and Pride groups which welcome all participants
• Flexible working hours