Privileged Access Management (PAM) Lead
Role Overview
The Privileged Access Management (PAM) Lead is responsible for defining, implementing, and overseeing the organisation's strategy for securing privileged identities, accounts, and access to critical systems. This role ensures that privileged access is tightly controlled, monitored, and compliant with internal security policies and external regulatory requirements. The PAM Lead partners with security, infrastructure, risk, and audit teams to strengthen identity‑centric security and support a Zero‑Trust security model.
Key Responsibilities
1. Strategy & Governance
Develop and maintain the organisation's PAM strategy, roadmap, and governance framework.
Define policies for privileged identities, credential vaulting, session monitoring, and just‑in‑time (JIT) access.
Ensure PAM controls support regulatory, audit, and compliance requirements (e.g., ISO 27001, NIST, SOC2).
2. Privileged Access Operations
Lead the implementation, configuration, and lifecycle management of PAM solutions (e.g., CyberArk, BeyondTrust, Delinea).
Oversee privileged account onboarding, access provisioning, access recertification, and de‑provisioning workflows.
Monitor privileged sessions, detect anomalies, and enforce robust session recording and audit trails.
3. Technology & Architecture
Define technical standards for privileged account usage across servers, databases, applications, and cloud platforms.
Integrate PAM tooling with identity systems, SIEM/SOAR platforms, and cloud environments (AWS, Azure, etc.).
Collaborate with engineering teams to embed PAM controls into CI/CD, DevOps, and infrastructure processes.
4. Risk Management & Compliance
Work closely with risk, audit, and GRC teams to remediate findings related to excessive or unmanaged privileged access.
Conduct maturity assessments, gap analyses, and define remediation plans for privileged access posture.
5. Stakeholder Engagement & Leadership
Act as the organisation's subject‑matter expert for PAM and identity security.
Advise business and technology stakeholders on secure access models and best practices.
Lead and mentor IAM/PAM engineers and analysts.
Communicate risks, KPIs, and improvements to senior leadership.
Required Skills & Experience
Technical Skills
Strong expertise in PAM platforms such as CyberArk, BeyondTrust, Delinea, or similar.
Deep understanding of identity lifecycle management, access control models, RBAC, SSO, MFA, and authentication standards (SAML, OIDC, OAuth).
Experience designing PAM controls for hybrid environments (on‑prem & cloud).
Familiarity with SIEM/SOAR tools and integrating PAM telemetry into security operations.
Professional Experience
Several years of experience in identity security, cybersecurity, or access management, with a clear focus on PAM.
Proven experience managing enterprise‑wide IAM/PAM programs in complex environments with diverse user populations.
Linguistic Skills
Dutch OR French Native with a good command of the second national language
English
Soft Skills
Strong stakeholder management and communication skills.
Ability to influence cross‑functional teams and drive adoption of security best practices.
Analytical mindset with attention to detail and risk awareness.
Optional/Preferred Qualifications
Certifications such as CISSP, CISM, CCSP, or vendor‑specific PAM certifications.
Experience in Zero‑Trust architecture design.
Background in auditing, governance, or compliance.