Privileged Access Management (PAM) Lead

We are seeking a highly skilled and experienced Privileged Access Management (PAM) Lead to oversee the design, implementation, and governance of privileged access controls across our enterprise. This role is critical in protecting sensitive systems and data by ensuring that privileged accounts are properly managed, monitored, and secured.

Strategy & Governance

• Develop and maintain the PAM strategy, roadmap, and policies aligned with security and compliance requirements.
• Lead PAM governance initiatives, including periodic access reviews, audits, and reporting.

Implementation & Operations

• Manage the deployment and configuration of PAM tools (e.g., CyberArk, BeyondTrust, Delinea, etc.).
• Oversee onboarding of privileged accounts and systems into the PAM solution.
• Ensure proper vaulting, session monitoring, and credential rotation for privileged accounts.
• Implementation of PAM practices and/or controls in modern working cloud environments (AWS/Azure).

Risk Management & Compliance

• Collaborate with internal audit, risk, and compliance teams to ensure PAM controls meet regulatory standards (e.g., ISO 27001, NIST, GDPR).
• Respond to audit findings and implement remediation plans.

Team Leadership & Collaboration

• Lead a team of PAM engineers and analysts, providing technical guidance and mentorship.
• Work closely with IT, infrastructure, and application teams to integrate PAM controls across platforms.

Monitoring & Incident Response

• Monitor privileged access activities and investigate anomalies or potential misuse.
• Support incident response efforts related to privileged account compromise.

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 5+ years of experience in Identity & Access Management, with at least 2 years in PAM leadership.
• Hands-on experience with PAM tools such as CyberArk, BeyondTrust, or similar.
• Strong understanding of Active Directory, Windows/Linux systems, cloud platforms (AWS, Azure), and networking.
• Familiarity with regulatory frameworks and standards (e.g., GDPR, PCI-DSS, SWIFT, DORA, NIS2).
• Excellent communication, leadership, and stakeholder management skills.
• Fluent English is required in spoken and written communication
• Relevant certifications (e.g., CyberArk, Delinea, BeyondTrust, CISSP, CISM, CISA) are an advantage.
• Experience with automation and scripting (PowerShell, Python).
• Knowledge of Zero Trust and least privilege principles.

• Flexibility. Flexible working hours, Hybrid work, and the possibility to work from anywhere in the EU, Iceland, Switzerland, and the UK (in total 90 days per year)
• International teams. Teams that go outside Pan-Baltic borders, where people value challenging work together with good humor and having fun
• More vacation. Additional weeks of vacation are available to all employees who have been in the company for 1 year or more
• Volunteer time off. We care about giving back to society, therefore, you will get additional days off for volunteering purposes
• Paid leave. We are proud of our employees who are participating in military training. Therefore, Luminor offers 30 fully paid calendar days for military training every year
• Health benefits. A competitive benefits package in addition to your salary that includes health insurance after the first 3 months pass in all three Baltic states, as well as Health days in case of your absence due to sickness without a doctor's note needed
• Wellbeing. Access to tools and resources that help you feel good and be productive at work and in life
• Professional growth. Internal and external training programs, workshops, conferences, online training, etc.
• Special Offer for Luminor products & services. Enjoy special offers & pricing for products and services provided by Luminor