Identity Protection Manager

WTW has embarked on a multi-year programme to embed its physical and digital information security standards across the business. That is, ensuring clients, business partners and internal information is always protected appropriately. The Security Programme (SP) covers all areas of WTW and aims to deliver prioritized and fit for purpose enhancements for each business globally. Privileged Access Management (PAM) and Access Governance (AGT) are some of the initiatives which will deliver a series of changes over the SP lifecycle. You will work closely with Business Leadership, IT domains and internal stakeholders to support the delivery of wider programme ensuring our modernization efforts meet global regulations.

Willis Towers Watson (WTW) Platform Engineering function requires an experienced Identity Protection Manager to work within the Identity and Access Management function.

As an experienced information security professional, you will be responsible for leading an internationally dispersed team, support and advise the Global Head of IAM in developing the Identity Control Framework, manage the Identity Risk Portfolio, provide oversight of access recertification and privileged access processes for the entire organization through utilization of a range of IAM Products including Microsoft Identity, SailPoint and CyberArk.

You will functionally report to the Global Head of IAM. This role is a hybrid role where the normal working base location will be balance between home and office as needed.

• This role will support Governance, Risk and Compliance responsibilities within WTW and includes activities such as;
• Provide oversight and input to IAM processes undertaken across WTW including access recertification, privileged access, JML, policies/standards and risk process ensuring alignment with the internal Information and Cyber Security framework.
• Assist the IAM Leads in developing the Identity Control Framework by continually researching new technologies, processes and practices contributing to the long-term Identity strategy within WTW.
• Manage key audit requests from both internal and external auditors to provide regulatory evidence to support SOX, SOC2, HIPPA etc.
• Perform as a subject matter expert within IAM covering all aspects of the Identity Security
• Support solution development through problem solving to ensure adherence to Security Controls, Policies and Standards with a focus on automation and control.
• Derive themes from identified gaps and recommend appropriate remediation measures to mitigate risk associated with gaps.
• Work closely with senior leadership to identify improvement opportunities to enhance existing controls.
• Manage the end-to-end audit lifecycle and Own Management Action Plans
• Govern IAM documentation: design, maintain, and continuously improve policies, SOPs, and compliance dashboards.

The Requirements

Skills:

7-8 year in Identity domain

• Knowledge and understanding of Information Security Frameworks and standards (FFIEC, NIST, ISO etc)
• Knowledge and understanding of Regulatory Risk and Compliance policies and programs
• Experience of Cloud technology and Identity solutions and practices
• Ability to work as part of a team
• Knowledge of IAM controls and how to implement them effectively such as; toxic combinations, segregation of duties, lead privileged and zero trust
• Ability to deliver change through people
• Excellent Communication skills, especially written English
• Strong Stakeholder management and ability to influence business and IT leadership.
• The ability to foster and grow relationships.
• Knowledge of SOx/SOC2 requirements for Privileged Access Monitoring and Access Governance Controls.
• Experience of working in a live operational environment with an understanding of the impact of policy adherence is desirable.
• Continuous Learner with a track record of driving process improvement and control maturity.

Behaviors:

• Resourcefulness and organizational agility
• Global team player with good interpersonal and influencing skills
• Conflict Management Resolution (Options Analysis)
• Customer Focus & Integrity and Trust
• Personal Learning & development
• Continuous Improvement Mindset – Challenges the status quo and pushes beyond comfort zones