Overview

In this role you drive identity and access management and information security initiatives to protect Mondelēz assets. You work with global security leaders to implement controls, test security systems, and ensure compliance with policy and standards. You will design and operate SailPoint IdentityIQ solutions, and collaborate with cross‑functional teams to enable secure access while managing third‑party providers. This is a hands‑on, security‑driven position that blends governance, risk management and IT operations to scale secure identities.

Responsabilidades

- Assess information security risks and support asset protection through testing and policy adherence
- Implement cyber security technology and ensure day‑to‑day security operations under general security lead guidance
- Manage third‑party providers to meet internal/ external standards
- Provide information security training to relevant teams
- Design, develop and deploy SailPoint IdentityIQ workflows, connectors and RBAC/ABAC/PBAC models
- Operate IIQ as SME across environments: health, provisioning, upgrades, change control (ITIL/ITSM)
- Run access certification campaigns: manager/entitlement owner approvals, micro‑certifications, SoD reviews
- Apply risk‑based strategies and AI‑driven recommendations for access management
- Improve Joiner/Mover/Leaver workflows including timely de‑provisioning and orphan account cleanup
- Lead role mining,



role engineering and entitlement rationalisation
- Govern privileged access via PAM, SoD enforcement and Just‑In‑Time provisioning
- Ensure IGA processes align with SOX, GDPR, HIPAA, PCI‑DSS, NIST 800‑53 and ISO 27001 with audit‑ready reporting
- Build scalable integrations (ServiceNow/Jira, SIEM/SOAR, multi‑cloud IAM)
- Partner with application owners, HR, IT Security and business units to drive adoption and report platform maturity KPIs

Requisitos principales

- 10+ years in Identity & Access Management
- 7+ years hands‑on IGA platform engineering
- Expert‑level SailPoint IdentityIQ skills
- Strong Java and BeanShell scripting; SQL, XML, JSON; REST APIs
- Experience with LDAP/Active Directory, Azure AD/Entra ID
- Knowledge of SCIM, SAML 2.0, OAuth 2.0, OpenID Connect; CI/CD pipelines
- NIST CSF 2.0, NIST 800‑53, ISO 27001/27002, Zero Trust, COBIT 2019
- Bachelor‑level degree in CS/InfoSec or related field, or equivalent experience
- SailPoint certifications; CISSP/CISM/CISA (preferred)

- Effective communication with technical and non‑technical stakeholders
- Analytical and problem‑solving abilities
- Team player with leadership capability
- SailPoint IdentityIQ (workflows, connectors, lifecycle events, certifications, role modelling)
- Java/BeanShell scripting; SQL; XML; JSON; REST APIs
- LDAP, Active Directory, Azure AD/Entra ID

📌 Platform Engineer, IAM Identity Gov. & Admin. - españa
🏢 Mondelez International
📍 España