Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.
The IAM Security Assurance Architect is responsible for reviewing all new applications, platforms, cloud services, and technology changes to ensure they meet the organisation's baseline IAM security requirements before they go live.
The role acts as the IAM security review authority within technology delivery and change processes, and builds the automation needed to provide continuous assurance that identity and access controls remain effective throughout the application lifecycle. The focus is on two outcomes: rigorous security reviews and automated, always-on assurance.
Key Responsibilities
1. IAM Security Reviews
Serve as the IAM security review authority for new applications, technology platforms, cloud workloads, and infrastructure changes.
Review designs and change requests through project lifecycle and design checkpoint governance processes.
Assess and approve applications against baseline IAM security requirements, including: Authentication standards
MFA requirements
Privileged access controls
Role-based access models
Segregation of Duties requirements
Identity lifecycle (joiner / mover / leaver) requirements
Account provisioning and deprovisioning controls
Service account and non-human identity management standards
Federation and Single Sign-On requirements
Review application access models, role structures, entitlement designs, and access matrices.
Classify application criticality and confirm IAM onboarding requirements are met.
Identify security risks, control gaps, and remediation actions, and confirm closure before deployment.
Provide clear, documented review decisions and risk-based approvals to delivery teams.
2. Assurance Automation & Continuous Compliance
Design and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements.
Automate evidence collection and control checks to reduce manual review effort and provide always-on assurance.
Establish automated, continuous monitoring for: Orphaned accounts
Stale and dormant identities
Excessive or unused privileges
Toxic access combinations
Service account and non-human identity risks
Privileged account misuse
Deviations from approved access baselines
Integrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM).
Define Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and IAM assurance health metrics.
Build and maintain dashboards that surface control effectiveness and non-compliance for remediation.
Drive an automate-first approach to control validation, minimising point-in-time manual checks.
3. Remediation, Risk & Reporting
Track and drive closure of IAM security review findings and assurance exceptions.
Review IAM-related risk assessments, exceptions, and remediation plans.
Support internal and external audits with review evidence and assurance data.
Report on review throughput, control coverage, and residual risk to IAM leadership.
4. Stakeholder Engagement
Partner with application, engineering, cloud, and change teams to embed security-by-design in delivery.
Advise project teams on how to meet baseline IAM requirements early in the lifecycle.
Collaborate with Security, Risk, and Audit functions on assurance outcomes and control gaps.
Key Deliverables
IAM Security Review Decisions & Risk-Based Approvals
Baseline IAM Requirement Assessments for New Applications
Continuous Assurance Automation & Control Validation Framework
Automated Evidence Collection &…