This is a senior and advisory role where you will work closely with stakeholders across Group IT, and the business. The position combines hands-on technical work with change management, governance, and communication. Reporting to the Group CISO, you will help define how identity security is designed and operated across the organization, supporting Lindab’s Zero Trust journey while ensuring compliance, usability, and scalability. 

If you enjoy building structure, creating clear processes, and acting as a trusted advisor in a complex organization, this role offers the opportunity to make a real and lasting impact. 

Main Responsibilities 

• Maintain and enforce Lindab’s Group IAM policies, standards, and governance frameworks to ensure consistent and secure identity practices across the organisation. 

• Lead access governance activities, including structured access reviews, compliance evidence collection, and end‑to‑end identity lifecycle management. 

• Monitor identity‑related threats and audit logs, proactively detecting anomalies and strengthening continuous security across all environments. 

• Design and optimise Conditional Access policies and implement passwordless authentication for selected user groups, improving both security and user experience. 

• Drive least‑privilege access through a mature RBAC model and lead the transition from legacy service accounts to securely governed Service Principals. 

• Stay up to date with Microsoft’s evolving identity and security ecosystem, including MFA advancements, tiering models, and emerging IAM technologies. 

• Act as service lead for IAM‑related security tools, ensuring stable operations, effective integrations, and continuous improvement. 

• Identify, document, and follow up on IAM‑related risks, driving mitigation actions together with stakeholders across the business. 

• Work within a hybrid AD and Entra ID environment with multiple tenants and complex cross‑tenant integrations. 

• Contribute to designing modern authentication flows for internal systems and third‑party SaaS applications. 

• Use automation (PowerShell, Graph API, workflow engines) to standardise and streamline identity lifecycle processes. 

Previous Experience & Competencies 

• 5+ years of hands-on experience working with Active Directory and Entra ID (Azure AD), with practices aligned to recognised frameworks such as the Azure Well‑Architected Framework and NIST SP 800‑63. 

• Deep understanding of Zero Trust principles and modern identity security best practices. 

• Proven skills in Conditional Access, Privileged Identity Management (PIM), RBAC, Identity Protection and standards such as SAML as well as experience migrating from legacy protocols (e.g., NTLM) to modern secure authentication methods.