About the Role

This role is open to candidates across all locations where BHP operates.

Identity and Access Management (IAM) is a critical technology leadership role responsible for defining and delivering BHP's enterprise IAM strategy, , services and roadmap. Reporting to the Head of Technology Cloud and Network, this role is accountable for ensuring secure, scalable and compliant identities & access to BHP's systems, applications, platforms and data across workforce, third-party, privileged and non-human identities.

As the leader of the IAM capability, you will establish identity as a foundational element of BHP's Zero Trust security model while balancing security, operational performance and user experience. You will lead the evolution of IAM services across hybrid, cloud operational technology and AI environments, ensuring identity controls are embedded by design across technology platforms and business initiatives.

This role requires extensive collaboration across Cybersecurity, Technology Foundations, Digital, HR, Risk, Operational Technology, AI CoE and business stakeholders. Success will be achieved through strong stakeholder engagement, strategic influence and the ability to align diverse teams around common outcomes.

The role is also responsible for advancing the organisation's readiness for emerging identity challenges, including machine and workload identities, autonomous systems and the use of AI-enabled capabilities to improve IAM operations, governance and risk management.

Key Accountabilities

• Define and maintain the Identity and Access Management strategy for enterprise and operational domains, operating model and roadmap aligned to business priorities, regulatory obligations and Zero Trust principles
• Lead the delivery and continuous improvement of enterprise IAM services including workforce identity, privileged access management, identity governance, third-party access, authentication, federation, certificates management and non-human identity management.
• Ensure IAM services operate safely, securely and reliably across cloud, on-premises, SaaS and operational technology environments through commercial management of outsourced partners and internal resources.
• Establish governance frameworks, policies, standards and controls that support compliance with security, privacy, risk and audit requirements.
• Drive the maturation of non-human identity capabilities including service accounts, workload identities, certificates, secrets, APIs, automation platforms and emerging AI agents.
• Champion the adoption of automation and AI-enabled capabilities to improve operational efficiency, access governance, threat detection, identity analytics and service delivery outcomes.
• Partner with technology, cybersecurity and business leaders to embed identity controls and secure access principles into platforms, applications, projects and transformation initiatives.
• Lead identity related risk management activities, audit engagements, remediation programs and assurance reporting.
• Influence enterprise decision making through proactive stakeholder engagement, effective communication and the ability to translate technical concepts into business outcomes.
• Develop a culture of continuous improvement, customer centricity, capability uplift and operational excellence across the IAM function realised through elevated productivity metrics and increased use of automation.
• Identifies, implements and evaluates the success of continuous improvement activities and initiatives to improve safety, productivity, cost and value outcomes for the business.
• Conducts presentations and facilitates workshops using storytelling to engage stakeholders, build alignment and drive organisational outcomes.

About You

You are an experienced technology leader with deep expertise in Identity and Access Management and a proven track record delivering enterprise scale security and technology outcomes within complex global organisations.

You can successfully balance strategic leadership, operational excellence and stakeholder engagement while driving measurable business value through secure and modern identity capabilities.

You will bring:

• Significant experience leading enterprise IAM functions, programs or platforms in complex hybrid and multi-cloud environments.
• Strong knowledge of identity governance, privileged access management, authentication, federation, workforce identity lifecycle management and Zero Trust security principles.
• Experience developing strategies and operating models for emerging identity domains including machine identities, workload identities and AI-enabled services.
• Proven ability to influence stakeholders, build partnerships and deliver outcomes across multiple technology and business functions.
• Experience leading operational services, transformation initiatives and continuous improvement programs.
• Strong understanding of cyber security governance and operations, risk management and compliance frameworks including ISO 27001, NIST CSF eic.
• Experience leveraging automation, analytics and AI capabilities to improve operational performance and customer experience
• Exceptional communication, leadership and stakeholder management skills with the ability to engage audiences from technical teams through to executive leaders.
• A commitment to safety, inclusion, continuous learning and delivering value for customers and the business.Relevant industry and product certifications like CISSP, CISM, SANS-GIAC etc.