Job Opportunities API

We’re Pentland Brands: a global family business behind some of the world’s most iconic active and lifestyle brands. We bring integrity, energy and ambition to our work, setting high standards and striving to deliver great outcomes without ego. Design cycling apparel built for movement, endurance and the ride ahead. At Pentland Brands, every role helps move our brands forward. Whether you’re supporting our people, improving our systems, growing our commercial performance, strengthening operations or shaping better ways of working, your impact reaches across a portfolio of iconic brands used by consumers around the world. The Lead Analyst (IAM & Microsoft Security) is responsible for the design, implementation, and continuous improvement of identity and access management (IAM), privileged access management (PAM), and Microsoft security services across the organisation. This role acts as the subject matter expert and product owner for IAM and Microsoft security capabilities, ensuring secure, scalable, and compliant identity services that protect enterprise assets and enable the business. The role combines deep technical expertise with product ownership, driving roadmap, standards, and best practices across identity, access, and Microsoft security tooling. This role has the opportunity to define, implement and own the future IAM strategy . What you’ll be doing: IAM & PAM Product Ownership – Own the IAM and PAM (Beyond Trust) platforms end-to-end; define roadmap, capabilities, and service improvements aligned to business and security strategy. Microsoft Security Ownership – Act as Product Owner for the Microsoft security ecosystem including Entra ID (Azure AD), Microsoft threat detection and protection suite, and identity protection capabilities. Access Governance & JML Oversight – Define and oversee joiner, mover, and leaver (JML) processes across HR and IT, ensuring controls are consistently applied and aligned to least privilege principles. JML Assurance & Control – Conduct regular audits and control checks to validate that JML processes are operating effectively, with clear ownership of remediation actions where gaps are identified. Leaver Management Authority – Maintain authority to enforce timely and secure deprovisioning of access for leavers, including direct intervention where required to mitigate risk. Privileged Access Management – Implement and maintain PAM controls including least privilege, JIT access, and privileged session management. Security & Compliance – Ensure identity systems are secure, compliant, and aligned with internal policies and external regulatory requirements. Operational Support – Provide advanced support and act as escalation point for IAM and Microsoft security incidents and issues. Automation & Integration – Drive automation of identity processes and integrate IAM solutions with enterprise systems and cloud platforms. Continuous Improvement – Identify and deliver enhancements to improve security posture, user experience, and operational efficiency. What you’ll bring: 10 - 12 years of relevant experience in IAM & MS Security. Microsoft Entra ID (Azure AD) – advanced configuration and identity architecture Identity Access Management platform expertise (e.g. Microsoft, Ping, SailPoint, etc) Privileged Access Management solutions (e.g. BeyondTrust PAM or equivalent) Identity governance and administration (IGA) concepts and tooling Authentication (SAML, OAuth, OIDC) and provisioning (SCIM) Conditional Access, MFA, and Zero Trust principles Automation and scripting (PowerShell, Graph API) Integration with SaaS, cloud (Azure), and on-prem identity systems (e.g. AD) Working knowledge of security frameworks (e.g. NIST, CIS) and ability to translate controls into practical IAM and Microsoft security configurations Microsoft certificat