The position We're seeking an experienced and highly analytical IDAM Security Advisor to join our expanding team. This is a critical advisory role, reporting directly to the Head of Tech Security, where you will be instrumental in shaping our Identity and Access Management (IAM) future. You'll work closely with our team of IAM specialists, providing guidance and expertise to design, build, and implement our IAM strategy, policies, and standards, ensuring best-in-class coverage and adherence to best practices. Brief Description The position We're seeking an experienced and highly analytical IDAM Security Advisor to join our expanding team. This is a critical advisory role, reporting directly to the Head of Tech Security, where you will be instrumental in shaping our Identity and Access Management (IAM) future. You'll work closely with our team of IAM specialists, providing guidance and expertise to design, build, and implement our IAM strategy, policies, and standards, ensuring best-in-class coverage and adherence to best practices. This role is for someone who thrives on influencing outcomes and driving strategic direction in a fast-paced environment. Your Role

Key Responsibilities
- Strategic Leadership & Advisory: Provide expert advisory services on IDAM, including human, non-human, and machine identities, aligning with security, policy compliance, regulatory obligations, and zero-trust principles. Lead the strategic design and governance of our IDAM capabilities.
- IDAM Strategy & Architecture: Develop and maintain the enterprise IDAM strategy, roadmap, and target architecture. Define and drive our zero-trust architecture posture, leveraging identity as the primary control plane.
- Policy & Standards Development: Design, implement, and govern comprehensive IAM frameworks, policies,



and standards covering identity lifecycle management, governance, administration (IGA), and Privileged Access Management (PAM).
- Authentication & Access Management: Lead the design and uplift of enterprise authentication capabilities, including Multi-Factor Authentication (MFA), passwordless, and adaptive/risk-based authentication. Define and enforce consistent access management policies.
- Privileged Access Management (PAM): Define and govern privileged access policies across on-premises, cloud (AWS, Azure, GCP), and third-party remote access environments, with a strong focus on Zero Standing Privilege (ZSP), Just-In-Time (JIT) access, and Separation of Duties (SoD) models.
- Risk, Compliance & Assurance: Identify, assess, and mitigate IDAM-related security risks. Ensure controls comply with legislative and regulatory obligations (e.g., APRA CPS 234/230, ISO 27001).
- Stakeholder Engagement: Act as a Subject Matter Expert (SME), translating complex IDAM concepts and findings into business-relevant language for technical and non-technical audiences, including executive leadership. You will need strong skills to prepare and present business cases.
- Incident Response: Provide IDAM expertise during security incidents (e.g., account compromise, privilege escalation), supporting investigation, containment, and remediation efforts. What Experience You’ll Bring
- Minimum 7 years of hands‑on experience in Identity and Access Management roles,



with significant expertise in Privileged Access Management (PAM).
- Proven experience (5+ years) with enterprise identity platforms, specifically OKTA and Entra ID (formerly Azure AD), including governance, configuration review, and security validation.
- Demonstrated experience implementing Zero Standing Privilege, Zero Standard Access, and Separation of Duties (SoD).
- Solid enterprise‑level experience within complex environments. Technical Expertise
- Strong understanding of PAM concepts: credential vaulting, session recording, password rotation, break‑glass workflows, and security control validation.
- In‑depth knowledge of authentication and authorisation concepts, including adaptive authentication, risk‑based access controls, phishing‑resistant MFA (FIDO2/WebAuthn), and policy enforcement.
- Familiarity with protocols/standards such as OAuth 2.0, OpenID Connect (OIDC), SCIM, and LDAP.
- Experience with cloud identity platforms (AWS IAM, Azure AD, GCP IAM). Soft Skills
- Exceptional analytical and problem‑solving abilities with a meticulous eye for detail.
- Superior written and verbal communication skills, with a proven ability to craft compelling business cases and convey complex technical information clearly to diverse audiences.
- Strong stakeholder management and influencing skills, capable of driving consensus and progress without direct authority.
- Self‑motivated, proactive, and a team-oriented team player who thrives in a fast‑paced, evolving environment. Qualifications (Desirable)
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent industry experience.
- Industry‑recognised certifications such as CISSP, CIS

📌 IDAM Security Advisor (Brisbane)
🏢 Auto & General Australia
📍 Brisbane