This job is with Standard Chartered Bank, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

Job Summary

Join Standard Chartered's Identity and Access Management (IAM) Authorisation Security Team in a pivotal role as Lead - IAM Authorisation (AuthZ) Policy Engineering. This position is integral to the implementation and governance of advanced authorisation policies designed to secure enterprise operations. You will translate complex business, regulatory, risk, and security requirements into machine-consumable, enforceable policy artefacts that cover a broad range of identities including human users, machines, privileged accounts, digital agents, and emerging AI entities.

As a specialist in policy-based access control (PBAC), you will lead the integration of this framework into our security infrastructure, ensuring our authorisation solutions are precise, auditable, and scalable across hybrid enterprise environments. This role champions a disciplined engineering approach to authorisation-ensuring traceability and testability from policy specification through enforcement. You will collaborate with diverse technical teams and stakeholders to develop robust access governance, specifically focusing on agent delegation, trust boundaries, Identity Provider (IdP) integration, and continuous delivery of policy lifecycle management.

Ideal candidates are passionate about innovation in cyber security, eager to address challenges related to AI governance and secure identity management in a dynamic financial services context. Join us in shaping the future of secure access controls and digital trust at Standard Chartered.





Key Responsibilities

In this leadership role, you will be responsible for architecting and managing enterprise-wide authorisation policies based on Policy-Based Access Control (PBAC) principles. Your key accountabilities include:

- Designing, engineering, and governing scalable authorisation policies aligned with business objectives, regulatory mandates, and security standards.
- Translating complex risk and compliance requirements into automated, executable policy artefacts that enable consistent and enforceable access decisions.
- Developing and maintaining detailed machine-readable policy components such as roles, user attributes, contextual conditions, constraints, and delegation protocols.
- Creating reusable policy templates and comprehensive reference frameworks that standardise policy deployment and reduce implementation complexity.
- Ensuring full lifecycle traceability across all policy artefacts, enforcement points, decision logs, and audit trails to support compliance and incident investigations.
- Driving semantic integrity across policy ecosystems by eliminating contradictions and ambiguities in policy rules.
- Establishing governance models for delegated authorization involving AI agents, service principals, and machine identities,



ensuring accountability and trust boundary enforcement.
- Implementing security guardrails to prevent privilege escalation, policy circumvention, and to manage delegation securely.

Skills and Experience

Essential Skills and Experience

- Comprehensive experience in Identity and Access Management (IAM) systems, with proven expertise in designing and implementing Policy-Based Access Control (PBAC) models.
- Proficient in Policy-as-Code methodologies, enabling automated and version-controlled policy deployment and validation.
- Hands-on knowledge of OAuth frameworks and on-behalf-of (OBO) delegation models.
- Experience integrating Identity Providers (IdPs) and Identity Governance solutions within complex enterprise environments.
- Familiarity with authorization controls specifically applied to emerging agentic AI environments.

Desirable Competencies

- Ability to translate high-level security and compliance requirements into exact policy statements.
- Strong analytical, problem-solving, and communication skills to work cross-functionally with technical teams, stakeholders, and regulators.
- Experience in architecting scalable governance frameworks enabling secure and auditable delegation of privileges.

Motivations

• Driven by solving emerging authorization challenges, shaping agentic Identity, policy-driven governance, and enabling secure innovation. Thrives in environments requiring deep technical expertise, stakeholder engagement, and measurable improvements in security and operational effectiveness.

Qualifications

Experience Requirements: 10-12+ years of progressive experience in Cyber Security and Identity & Acce

📌 SME - IAM Policy Authorization Engineering (Chennai)
🏢 Standard Chartered Bank
📍 Chennai