Cyber Security Unit Manager - Identity & Access Management

Job Description As Unit Manager for Identity & Access Management (IAM), you will lead one of H&M Group’s most critical cyber security capabilities and play a key role in strengthening the organisation’s security, resilience and ability to deliver on its strategic ambitions. As a member of the Cyber Security Leadership Team reporting to the CISO, you will share accountability for the overall cyber security strategy, priorities and long-term development of the Cyber Security function. Working closely with leaders across business, technology and cyber security, you will help shape outcomes that balance business objectives, security needs and risk management across H&M Group. You will provide strategic leadership for H&M Group’s global IAM capability through an established leadership team spanning the end-to-end identity lifecycle. Through your leadership, you will drive the continued evolution of IAM, ensuring the capability remains effective, scalable and aligned with the future needs of the business. WHAT YOU'LL DO Lead the strategic direction, maturity and long-term development of H&M Group’s Identity & Access Management capability, defining and evolving the IAM strategy, roadmap and operating model in alignment with business, technology and cyber security objectives. Contribute as a member of the Cyber Security Leadership Team to the overall cyber security strategy, priorities, operating model and long-term capability development. Build strong partnerships with business, technology and cyber security stakeholders to drive alignment, influence decisions and enable strategic outcomes. Drive organisational effectiveness, workforce planning, capability development and succession planning within the IAM function. Ensure effective management of IAM-related risks, controls, regulatory obligations and strategic initiatives. Lead budgeting, resource and investment planning, vendor strategy and prioritisation to support delivery of IAM and cyber security objectives. Foster a high-performing, collaborative and inclusive culture focused on continuous improvement, innovation and business value. WHO YOU ARE We are looking for people with: 8+ years of people management experience in cyber security, IAM or a closely related field. Proven experience leading an enterprise-scale IAM capability end to end in a global organisation, spanning governance, risk and compliance, architecture, engineering, delivery and operations. Proven experience leading through managers and developing high-performing leadership teams, with full ownership of a multidisciplinary organisation and its outcomes. Experience as a member of a senior cyber security, technology or enterprise leadership team, contributing to shared strategy, priorities, investment decisions and organisational outcomes beyond the individual’s own area of responsibility. Experience defining and executing enterprise IAM strategies, roadmaps, operating models and large-scale transformation, including organisational change across functional and organisational boundaries. Strong knowledge of IAM capabilities and technologies, including identity lifecycle management, access governance, authentication, authorisation and privileged access management, as well as enterprise IGA platforms such as Saviynt, SailPoint or similar. Strong knowledge of IAM-related risks, controls, policies, regulatory requirements and audit expectations. Experience managing significant budgets, investments, resources, sourcing arrangements and external partners, including leading negotiations with strategic vendors. Excellent communication and influencing skills, with proven experience engaging senior and executive stakeholders, clearly communicating strategic direction and translating complex IAM, cyber security and risk topics into business implications, priorities and decisions. Sound judgement and decision-making capability in complex, uncertain and risk-sensitive situations. Relevant certifications in I