Website:
Job details:
About Amber
Amber is a global student accommodation platform that helps students find and book full-time housing near top universities across the world. With a presence across multiple geographies, Amber partners with universities, housing providers, and student recruitment platforms to simplify the international student journey.
Role Overview
We are looking for an experienced IT Manager – Identity & Access Management (IAM) & Data Security to own and strengthen Amber's enterprise IT security posture across our global operations.
This role will be responsible for designing, implementing, and governing Identity & Access Management (IAM), enterprise data security, access governance, endpoint security, and IT infrastructure, while ensuring secure access to business-critical applications used across the organization.
The ideal candidate should have hands-on experience managing Microsoft Entra ID (Azure AD), Active Directory, Microsoft 365, Role-Based Access Control (RBAC), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), endpoint security, and enterprise IT operations.
Key Responsibilities
Identity & Access Management (Primary Responsibility)
- Own enterprise-wide Identity & Access Management (IAM) strategy and execution.
- Manage user lifecycle including provisioning, de-provisioning, access reviews, and privileged access.
- Administer Microsoft Entra ID (Azure AD), Active Directory, Microsoft 365, and enterprise authentication platforms.
- Implement and maintain:
- Role-Based Access Control (RBAC)
- Multi-Factor Authentication (MFA)
- Single Sign-On (SSO)
- Conditional Access Policies
- Least Privilege Access
- Privileged Access Management (PAM)
- Conduct periodic access audits to ensure regulatory compliance and eliminate unnecessary access.
Data Security & Cybersecurity (Critical)
- Develop and maintain enterprise security policies and data protection standards.
- Own endpoint security, DLP (Data Loss Prevention), encryption, and device security.
- Monitor security posture and respond to security incidents.
- Conduct vulnerability assessments and remediation planning.
- Drive compliance with ISO 27001, GDPR, SOC2, or equivalent frameworks.
- Implement Zero Trust security principles wherever applicable.
- Partner with internal stakeholders to ensure secure adoption of new business applications.
Enterprise Application & Access Governance
- Own access management across 100+ SaaS platforms and enterprise applications.
- Ensure secure onboarding/offboarding with automated provisioning wherever possible.
- Optimize software licensing, access governance, and utilization.
- Establish approval workflows for privileged access requests.
- Regularly review inactive accounts, excessive permissions, and security risks.
IT Infrastructure & Operations
- Manage Microsoft 365 ecosystem including Exchange Online, Teams, SharePoint, and OneDrive.
- Oversee Active Directory, Azure infrastructure, VPNs, firewalls, Wi-Fi, and enterprise networking.
- Ensure high availability, disaster recovery, backup, and business continuity.
- Lead IT asset lifecycle management and IT procurement.
Leadership
- Lead and mentor the IT Operations team.
- Partner with HR, Security, Finance, and Business teams on enterprise IT initiatives.
- Drive IT governance, documentation, and process improvements.
- Build scalable IT processes supporting global growth.
Requirements
Experience
- 6–10 years of experience in Enterprise IT Infrastructure & Security.
- Minimum 3 years managing Identity & Access Management (IAM).
- Experience securing enterprise environments supporting 300+ employees.
- Experience managing access across 100+ SaaS applications.
Must-Have Technical Skills
Identity & Access Management
- Microsoft Entra ID (Azure AD)
- Active Directory
- Identity & Access Management (IAM)
- Role-Based Access Control (RBAC)
- Multi-Factor Authentication (MFA)
- Single Sign-On (SSO)
- Conditional Access
- Privileged Access Management (PAM)
- Joiner-Mover-Leaver (JML) lifecycle management
Data Security
- Endpoint Security
- Microsoft Intune
- Microsoft Defender
- BitLocker
- Data Loss Prevention (DLP)
- Email Security
- Encryption
- Vulnerability Management
- Zero Trust Architecture
- Incident Response
- ISO 27001
- GDPR
Infrastructure
- Microsoft 365
- Exchange Online
- SharePoint Online
- OneDrive
- Windows Server
- VMware
- Azure
- Firewalls
- VPN
- LAN/WAN
- Backup & Disaster Recovery
Behavioral Skills
- Strong ownership with an automation-first mindset.
- Excellent stakeholder management across global teams.
- Strong analytical and risk assessment capabilities.
- Ability to balance security with business productivity.
- Experience leading enterprise-wide IT transformation initiatives.
Why Join Amber?
- Be part of a fast-growing global company..
- Opportunity to build and scale IT infrastructure & security practices.
- Work in a dynamic, high-impact environment.
Click on Apply to know more.
