John Fullah
Identity Access Management (Iam) @Virgin Money
Signup · Get unlimited contacts
WORK HISTORY
Identity Access Management (Iam) @Virgin Money
Glasgow City, GB
Led the complex, end-to-end technical migration and operational transformation of the Identity Governance & Lifecycle (IG & L) platform from legacy Aveksa to SailPoint IdentityIQ. This core CBEST Soteria initiative was strategically focused on uplifting the IAM security posture and achieving regulatory alignment following the merger with Nationwide Building Society.The programme delivered advanced IG & L services, including automated provisioning/deprovisioning and access governance, impacting over users and 150+ integrated applications. Key phases included SailPoint Platform Implementation and the systematic, risk-based Application Onboarding of Tier Zero Systems and Important Business Systems (IBS).Key Achievements- Collated the authoritative portfolio of 150+ applications and defined the risk-based Onboarding Strategy and Prioritisation Framework (incorporating business criticality and Tier Zero/IBS classification), enabling phased migration with zero service disruption- Mapped the comprehensive as-is/to-be state, redefining all critical governance domains: Joiner-Mover-Leaver (JML) workflows, access certifications, policy frameworks, and the foundational RBAC structures. Documented the complete process taxonomy with clear RACI accountability- Established the full SDLC environment topology (Dev, Test, Prod) in collaboration with the SailPoint vendor, and built a functional prototype to validate core automated provisioning and certification capabilities against defined functional and non-functional requirements (NFRs)- Authored the enterprise Test Strategy and led the full Quality Assurance lifecycle, including System Integration Testing (SIT) and orchestrating highly critical User Acceptance Testing (UAT) across Dev/Test/Prod environments, successfully achieving production sign-off for Tier Zero systems
EDUCATION
The University of Huddersfield
Construction Management
ABOUT JOHN FULLAH
A seasoned IT Security consultant with over a decade of dedicated experience, specialising in highly regulated industries. Certified in ISO 27001, AWS Security Specialty, CISA, CISM, and CRISC, demonstrating a robust foundation in information and cyber security risk management, technology resilience, and Governance, Risk, and Compliance (GRC) across on-premises and cloud environments. Proficient in conceptualising and implementing security regulatory and compliance frameworks, Cloud Controls Assurance (CCA), IAM, PAM, strategies, roadmaps, and industry best practices in both private and public sectors. Recognised for adept leadership, both hands-on and managerial, I excel in guiding cross-functional teams through diverse workstreams. My strategic approach ensures the successful execution of change initiatives that directly impact business-focused outcomes.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.