Senior Manager, Identity Governance

About the Team

The Identity Governance team is responsible for managing the services and controls that deliver stable, secure, and efficient Identity & Access Management (IAM) across Crypto.com and its related entities. IAM controls are foundational to the organisation, ensuring the right individuals have the right access to the right resources, backed by robust audit trails. 

Role overview

You'll lead a globally distributed Identity Governance team, owning the controls, risk assessments, and compliance posture that keep Crypto.com's identity ecosystem audit-ready. You'll set direction for your team's day-to-day work while staying hands-on with the highest-stakes risk assessments and stakeholder relationships yourself.

Manage and develop the Identity Governance team spanning APAC and EU time zones — set priorities, review work quality, and support career growth across the team.

Establish, manage, and document effective IAM controls, including the evaluation, testing, and rollout of a new group-wide Identity and Access Management platform.

Identify, assess, and document identity-related risks across key business processes.

Manage identity lifecycle risks in alignment with the Operational Risk Management Framework.

Partner with business, risk management, and compliance stakeholders to maintain compliance with Group Policies, risk standards, and regulatory obligations.

Foster a strong risk and control culture across key business functions.

Lead process deep-dive activities to map workflows, evaluate existing risks and controls, and identify control gaps.

Coordinate across APAC, EU, and US working hours to ensure consistent stakeholder engagement.

Control gaps identified in process deep-dives are closed within an agreed SLA.

Team operates with clear ownership and consistent quality across regions.

Clean audit outcomes on IAM-related controls.

Experience designing or evaluating identity governance platforms/tooling.

Familiarity with financial-services regulatory frameworks.

5+ years of experience in Identity and Access Management, information security, or risk & controls, ideally within financial services, an enterprise corporate environment, or a risk/compliance function supporting large-scale IT/Identity systems.

Background in Operational Risk, Product Risk, Compliance, or Audit.

Experience managing or mentoring a small team, including across distributed time zones.

Strong understanding of Information Technology risks and internal controls.

Demonstrated track record of identifying, analysing, and mitigating operational and security risks.

Strong stakeholder management, communication, and cross-functional collaboration skills.