Manager Identity & Access Management

About the Role

This role is open to candidates across all locations where BHP operates. The Identity and Access Management (IAM) leader is responsible for defining and delivering BHP’s enterprise IAM strategy, services, and roadmap. Reporting to the Head of Technology Cloud and Network, the role ensures secure, scalable, and compliant identities and access to BHP’s systems, applications, platforms, and data across workforce, third‑party, privileged, and non‑human identities. The leader will embed identity as a foundational element of BHP’s Zero Trust security model, evolve IAM services across hybrid, cloud, operational technology, and AI environments, and collaborate extensively with Cybersecurity, Technology Foundations, Digital, HR, Risk, Operational Technology, AI CoE, and business stakeholders.

Key Accountabilities

• Define and maintain the Identity and Access Management strategy for enterprise and operational domains, operating model, and roadmap aligned to business priorities, regulatory obligations, and Zero Trust principles.
• Lead delivery and continuous improvement of enterprise IAM services including workforce identity, privileged access management, identity governance, third‑party access, authentication, federation, certificates management, and non‑human identity management.
• Ensure IAM services operate safely, securely, and reliably across cloud, on‑premises, SaaS, and operational technology environments through commercial management of outsourced partners and internal resources.
• Establish governance frameworks, policies, standards, and controls that support compliance with security, privacy, risk, and audit requirements.
• Drive maturation of non‑human identity capabilities such as service accounts, workload identities, certificates, secrets, APIs, automation platforms, and emerging AI agents.
• Champion adoption of automation and AI‑enabled capabilities to improve operational efficiency, access governance, threat detection, identity analytics, and service delivery outcomes.
• Partner with technology, cybersecurity, and business leaders to embed identity controls and secure access principles into platforms, applications, projects, and transformation initiatives.
• Lead identity‑related risk management activities, audit engagements, remediation programs, and assurance reporting.
• Influence enterprise decision‑making through proactive stakeholder engagement, effective communication, and translation of technical concepts into business outcomes.
• Develop a culture of continuous improvement, customer centricity, capability uplift, and operational excellence across the IAM function, realized through elevated productivity metrics and increased use of automation.
• Identify, implement, and evaluate continuous‑improvement initiatives to enhance safety, productivity, cost, and value outcomes for the business.
• Conduct presentations and facilitate workshops using storytelling to engage stakeholders, build alignment, and drive organisational outcomes.

About You

• Significant experience leading enterprise IAM functions, programs, or platforms in complex hybrid and multi‑cloud environments.
• Deep knowledge of identity governance, privileged access management, authentication, federation, workforce identity lifecycle management, and Zero Trust security principles.
• Experience developing strategies and operating models for emerging identity domains, including machine identities, workload identities, and AI‑enabled services.
• Proven ability to influence stakeholders, build partnerships, and deliver outcomes across multiple technology and business functions.
• Experience leading operational services, transformation initiatives, and continuous‑improvement programs.
• Strong understanding of cybersecurity governance and operations, risk management, and compliance frameworks such as ISO 27001 and NIST CSF.
• Experience leveraging automation, analytics, and AI capabilities to improve operational performance and customer experience.
• Exceptional communication, leadership, and stakeholder‑management skills, with the ability to engage audiences from technical teams to executive leaders.
• Commitment to safety, inclusion, continuous learning, and delivering value for customers and the business.
• Relevant industry and product certifications (e.g., CISSP, CISM, SANS‑GIAC, etc.).

Benefits

• Attractive salary packages with performance‑based bonuses.
• Best‑in‑class employee share program.
• Flexible working options.
• Generous paid parental leave policy and other extended leave entitlements.
• Parent rooms and other family‑friendly facilities.
• Supportive, diverse, and inclusive workplace culture.

Our Process

BHP is committed to hiring individuals who align with the BHP Charter Values and meet the role’s requirements. The recruitment process may include police/criminal background checks, medical, drug and alcohol testing, due diligence checks, right‑to‑work verification, and reference checks. Internal BHP employees should apply via the internal jobs portal using their BHP email address.