Customers & External Identities Senior Expert

About the role

The Senior Expert for Customers & External Identities will lead the extension and governance of stc's identity management solutions for third‑party HRMS and user groups. The role focuses on secure identity lifecycle management, risk‑based authentication, and advanced analytics to protect stc IT applications and network systems.

Key responsibilities

• Extend stc identity management tools to integrate with Group third‑party HRMS.
• Manage the identity lifecycle of third‑party users, ensuring compliance with NCA and stc regulations, role‑based access, and least‑privilege principles.
• Implement IAM machine‑learning and user‑behavior analytics to reduce identity‑related risks.
• Develop risk‑based authentication mechanisms based on user‑defined risk scores.
• Audit third‑party user lifecycle processes, flagging misuse and policy violations.
• Govern and design identity & access management processes for third‑party users in line with CS Governance policies.
• Design identity verification technology for offshore users, aligning with HR and IT processes.
• Create threat use cases with the Cyber Defense Center for monitoring third‑party access.
• Lead design and operation of Customer Identity & Access Management for stc Play, stc TV, and MyStc portal, including 24/7 performance monitoring and secure API integrations.

Required profile

• Proven senior‑level experience in identity and access management, preferably within telecom or large‑scale IT environments.
• Deep knowledge of NCA and stc regulatory standards related to identity lifecycle and access control.
• Strong analytical mindset with experience in risk‑based authentication and user‑behavior analytics.
• Ability to lead design initiatives and collaborate with cyber‑defense, HR, and IT stakeholders.

Required skills

• Identity and Access Management (IAM) concepts and tools
• Risk‑based authentication mechanisms
• User behavior analytics and machine‑learning applications
• Identity verification technologies for offshore users
• API security and integration for identity services