Marsh is seeking an experienced IAM RBAC Business Solutions Lead to establish, own, and lead our enterprise-wide Role-Based Access Control (RBAC) function.
This role is specifically focused on someone who has personally owned an RBAC capability and/or has successfully deployed RBAC in an organization or environment where no formal RBAC framework previously existed.
You will be responsible for defining the strategy, building the operating model, leading implementation, and embedding RBAC as a sustainable enterprise capability. You will work across IAM, Cybersecurity, HR, Technology, and business teams to improve access governance, strengthen security, and make access management more efficient and scalable.
Experience working with one or more leading identity governance platforms is essential, including SailPoint IdentityIQ, SailPoint Identity Security Cloud, Oracle Identity Manager (OIM), or Saviynt.
What can you expect:
- A highly visible global leadership role with responsibility for owning and developing the enterprise RBAC function.
- The opportunity to build and mature an RBAC capability from the ground up across a complex, global organization.
- The chance to define how roles are designed, approved, governed, implemented, reviewed, and retired.
- A strategic role with accountability for the RBAC roadmap, operating model, standards, governance, and delivery outcomes.
- The opportunity to work with business, technology, IAM, security, HR, and risk stakeholders across multiple regions and functions.
- The chance to use automation, analytics, and AI to improve role management, access reviews, provisioning, and operational performance.
- A role that combines strategic leadership, stakeholder influence, and hands-on delivery in a complex global environment.
We will count on you to:
- Own the enterprise RBAC function, including its strategy, roadmap, operating model, governance, standards, processes, and performance.
- Lead the deployment of RBAC where no formal RBAC capability previously existed, creating the framework, processes, role ownership model, governance structure, and implementation approach.
- Establish RBAC as a sustainable enterprise capability across multiple business units, functions, applications, and regions.
- Define and deliver the RBAC strategy, maturity roadmap, standards, controls, and target operating model.
- Build strong partnerships with business, technology, IAM, security, HR, risk, and compliance stakeholders.
- Establish clear ownership and accountability for business roles, technical roles, applications, entitlements, and access decisions.
- Lead role discovery, role mining, role design, rationalization, approval, implementation, certification, and ongoing lifecycle management.
- Work hands-on with one or more identity governance platforms, including: SailPoint IdentityIQSailPoint Identity Security CloudOracle Identity Manager (OIM)Saviynt
- Oversee the configuration, implementation, integration, and ongoing use of the relevant identity governance platform or platforms.
- Translate complex business and technical requirements into practical, scalable RBAC and access governance solutions.
- Improve service quality by reducing provisioning delays, access errors, unnecessary manual activity, policy exceptions, and operational risk.
- Monitor RBAC performance using dashboards, KPIs, KRIs, service measures, and management reporting.
- Drive continuous improvement through maturity assessments, industry practices, automation, data analysis, and operational enhancements.
- Embed RBAC into the SDLC, change management, compliance, implementation, and post-production support processes.
- Lead and develop a regional team of employees and consultants while coordinating delivery across multiple stakeholders and workstreams.
What you need to have:
- Demonstrable experience owning an RBAC function or enterprise RBAC capability, with accountability for its strategy, operating model, governance, delivery, and ongoing performance.
- Proven experience deploying RBAC in an organization, business unit, or environment where no formal RBAC framework previously existed.
- Hands-on experience working with one or more of the following identity governance platforms:SailPoint IdentityIQSailPoint Identity Security CloudOracle Identity Manager (OIM)Saviynt
- 5+ years of experience leading enterprise RBAC, IAM, identity governance, or access transformation initiatives.
- Practical expertise in RBAC, identity governance, provisioning, authorization, access reviews, entitlement management, and access lifecycle management.
- Experience creating role models, defining role ownership, establishing governance processes, and embedding RBAC into day-to-day operations.
- Experience translating complex business and technical requirements into clear, scalable role and access models.
- Proven ability to lead through influence, manage senior stakeholders, and build alignment across global teams.
- Strong communication and presentation skills, with the ability to explain complex IAM and RBAC concepts to both technical and non-technical audiences.
- Strong analytical, problem-solving, and data-driven decision-making skills.
- Experience with enterprise processes, standards, SDLC, implementation lifecycle support, and operational governance.
- Knowledge of security, privacy, and compliance frameworks such as NIST, ISO 27001, and GDPR.
What makes you stand out:
- Experience taking an RBAC capability from initial concept and design through implementation, adoption, and operational maturity.
- A strong track record of building an RBAC function from the ground up, rather than only operating or maintaining an established framework.
- Experience leading RBAC deployment across a large, complex, global organization.
- Experience with role mining, role modeling, entitlement rationalization, business role engineering, access analysis, or authorization design.
- Experience integrating RBAC with HR systems, directories, applications, provisioning workflows, and identity governance platforms.
- The ability to balance strong security and compliance controls with a practical, user-focused access experience.
- Confidence working across business and technical teams to influence decisions, resolve ambiguity, and drive adoption.
- Experience using data, dashboards, and performance metrics to identify issues and improve operational outcomes.
- Familiarity with AI, automation, workflow optimization, and innovation in IAM or access governance.
- Experience leading teams and coordinating delivery across multiple stakeholders, regions, vendors, and projects.
- A proactive and collaborative leadership style, with the ability to simplify complexity, create momentum, and deliver measurable results.
Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.
Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law. In accordance with the Accessibility for Ontarians with Disabilities Act, 2005, Marsh will provide a reasonable accommodation to employees and prospective employees to the point of undue hardship upon request and as required in respect of the individual’s particular restrictions and limitations. If you require a specific accommodation because of a disability or medical need, please contact reasonableaccommodations@marsh.com.
Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.
