IAM Governance Manager
ESTREEM
Required skills
About the role
Translated into English from French by Korum. The employer's original wording is on their site.
Estreem : the new reference for payment processing in Europe
Born from a strategic partnership between two major French banking groups, BNP Paribas and BPCE, Estreem is an independent fintech launched in February 2025. Its ambition: to become the first sovereign payment processor in France, capable of operating at European scale.
In a payments sector undergoing deep transformation, Estreem positions itself as a disruptive player, combining security, technological agility and economic competitiveness. The objective is clear: to quickly enter the TOP 3 of European processors.
Equipped with a next-generation platform, Estreem covers the entire card processing value chain, from software publishing to operational management, relying on a state-of-the-art (cloud) infrastructure. It supports all major payment schemes (CB, Visa, Mastercard) as well as new European schemes, such as Wero.
Designed from the outset to reach beyond French borders, Estreem aims to become a pillar of European strategic autonomy in the field of payments.
The 3“E” of Estreem sum up its DNA: Excellence in technology, Expertise in the business, and a strong European vision.
📍Where we are: Paris, Lyon, Toulouse
More information about Estreem and our projects is available on our website: Estreem | European Payment Processing for Banks
💼 Your role at Estreem
As part of strengthening its access governance, cybersecurity and compliance requirements, Estreem is looking for a IAM Governance Manager (Identity & Access Management).
This position is intended to structure and steer the company's entire identity and access management framework. It takes place in a context of transformation, with the introduction of a target model for authorisation governance, strengthened compliance controls, automation of authorisation processes and the evolution of IAM tooling. The work currently identified covers in particular RBAC models, access reviews, SoD controls, management of internal and external populations, and the evolution of authorisation management tools.
The IAM Governance Manager is a central point between business teams, Internal IT, IT Security, HR, Risk and Compliance.
secure access to digital resources;
ensure regulatory compliance and audit readiness;
apply the principle of least privilege;
manage the identity lifecycle;
guarantee the traceability of authorisations;
develop process automation to improve operational efficiency and user experience.
Define the company's IAM vision and roadmap.
Build the identity and authorisation management policies and standards.
Define the target IAM governance model.
Structure roles and responsibilities between HR, procurement, business teams, Internal IT and IT Security.
Run the IAM governance bodies.
Steer IAM transformation projects and programmes.
Define the Joiner / Mover / Leaver processes.
Supervise the quality of identity data.
Ensure control over internal, external, technical and privileged accounts.
Set up management rules specific to contractors and external partners.
Define the control mechanisms needed to prevent orphan accounts.
Operationally create and delete accounts.
Build and maintain the catalogue of business roles.
Define RBAC models and prepare the evolution towards more advanced models if necessary.
Map application access and business roles.
Define the processes for requesting, validating and revoking access.
Ensure the application of the principle of least privilege.
Frame the rules for delegation and validation of access.
Steer access review and recertification campaigns.
Define first-level IAM controls and implement them.
Ensure compliance with regulatory and cybersecurity requirements.
Take part in internal and external audits.
Implement controls relating to segregation of duties (SoD).
Ensure the traceability of authorisations and sensitive access.
Produce IAM steering indicators.
Steer IAM and IGA solutions.
Define the needs for evolving the IAM ecosystem.
Supervise integrations between IAM, HR, directories and business applications.
Develop the automation of authorisation workflows.
Ensure the overall consistency of the IAM architecture.
Support application projects on identity and authorisation topics.
Train managers, application owners and access approvers.
Promote IAM best practices among all stakeholders.
Support business teams in defining and reviewing their access rights.
Develop a culture of accountability around authorisations.
🧩Position in the organisation
The IAM Governance Manager is the functional owner of the IAM framework.
Reporting to the CEO Office, the role is cross-functional and interacts closely with the operational teams Internal IT, IT Security and application managers.
The role consists of defining the rules, orchestrating processes, steering governance, checking the application of policies and coordinating all the stakeholders involved.
🎯Your profile
Five-year degree (Bac +5) in IT, cybersecurity or information systems.
Fluent French (C2), professional English (B2-C1).
Minimum of 7 to 10 years' experience in IAM, cybersecurity or access governance.
Proven experience leading transformation programmes.
Significant experience in an environment subject to strong regulatory requirements.
📌 Key skills required
Technical skillsIAM / IGA.
Microsoft Entra ID / Active Directory.
SSO, MFA, identity federation.
RBAC, ABAC.
Privileged access management (PAM).
Recertification and access governance.
Risk management and compliance.
Management of cross-functional projects.
Cross-functional leadership.
Strong capacity for influence.
Sense of governance and control.
Ability to synthesise.
Excellent interpersonal skills.
Ability to communicate with technical and business stakeholders.
Focus on results and continuous improvement.
💡 What we value
A product mindset: impact, user focus, lasting quality
Ability to challenge and to step back
Curiosity: desire to learn and grow
Job details
Location: Paris
Start date: As soon as possible
Contract type: Permanent contract (CDI)
Remote working: up to 10 days per month, within a limit of 3 days maximum per week.
Managerial (cadre) status
Pay & Benefits
Possibility of CET (time savings account)
SWILE card (meal voucher)
FMD (soft mobility allowance)
Employee savings: PEE, PERCO, profit-sharing, employer contribution matching
We are committed to a quality approach and will welcome every candidate with kindness and respect. As a reminder, this position is open to people with disabilities.
Finally, we place particular importance on our future employees acting with ethical and professional responsibility in their daily work. At any point during the recruitment process, the information on your CV, your identification details and your background may be verified.
See how well your CV fits this role. Log in or create a free account to check.