Identity and Access Management Lead

You've picked a great time to join Avon. We're the company that puts purpose, people and relationships at the heart of everything we do. The company that's 135 years young and only just getting started. As part of the Regent LP family, we're committed to being the best beauty company for the world by generating a positive environmental, economic and social impact for our communities across the globe.

Role Type

Permanent

What you'll be doing:

As the Identity & Access Management (IAM) Manager In this role, you'll lead Avon's cloud‑first Identity and Access Management (IAM) program, making sure the right people and systems have the right access at the right time. You'll shape how identities are created, managed and protected across cloud, SaaS and hybrid environments, aligning everything to Zero Trust principles and the NIST ICAM framework. You'll work closely with technology, security, HR and audit teams, act as a trusted IAM subject‑matter expert, and guide the organization through secure cloud growth. You'll also lead and support an IAM team, take ownership of IAM‑related risks and incidents, and help balance strong security with a smooth user experience.

Key responsibilities:

What you'll be working on:

• Defining and delivering a cloud‑first IAM strategy aligned to NIST ICAM and Zero Trust
• Designing and running identity lifecycle processes (joiner, mover, leaver) for people and non‑human identities
• Implementing and improving Identity Governance and Administration (IGA) using tools such as SailPoint
• Building and maintaining role‑based access models, access reviews and approval workflows
• Leading Privileged Access Management (PAM) using platforms like CyberArk, with a focus on just‑in‑time access
• Strengthening authentication and access controls, including MFA, conditional access and password less options
• Enabling secure Single Sign‑On (SSO) and federation using modern protocols (SAML, OAuth, OpenID Connect)
• Managing and optimizing Microsoft Entra ID and Active Directory in cloud and hybrid environments
• Partnering with cloud, DevOps and security teams to embed IAM into cloud security architectures

What we're looking for:

• 7+ years of experience in Identity and Access Management, cloud security or cybersecurity
• Strong knowledge of IAM concepts such as RBAC, least privilege, JIT access, IGA and PAM
• Hands‑on experience with Microsoft Entra ID (Azure AD) and Active Directory
• Experience with IGA and PAM tools such as SailPoint and CyberArk, or similar platforms
• A solid understanding of authentication, authorization, AAA and identity federation standards
• Confidence working in cloud‑first, SaaS‑heavy enterprise environments
• The ability to lead teams, make clear decisions and communicate effectively with both technical and non‑technical stakeholders
• Relevant security or identity certifications are a plus, but not required

What we offer:

We offer a comprehensive benefits package along with wellness resources and work-life balance support in line with your country practices and Avon purpose aiming to help you live a healthier life, protect you and your dear ones, and ensure you're at your best.

At Avon, we believe beauty is for everyone and that it's beautiful to be you. We celebrate our differences, champion self-expression and are committed to inclusion for all. We embrace diversity and individuality to build a culture that represents our communities and enables everyone to bring their best self to work. We also support reasonable adjustments both within our recruitment process and job design when required to empower you to work in a way that works for you.

Ready to be a part of it Join us.
#Avon

We inform that in accordance with the requirements of the on Whistleblower Protection Act of June 14, 2024(government gazette of 2024, item 928), each Avon company in Poland has implemented a Procedure for Reporting Irregularities and Subsequent Actions.

The full text of the procedure for each company, containing information about reporting methods, is available