Cloud Security Assurance
Role details
Job location
Tech stack
Job description
Lead cloud security assessments and architecture reviews across AWS, Azure, and GCP. Validate security implementations, provide expert guidance on cloud security posture, and support enterprise cloud transformation initiatives., Assessment & Architecture
- Lead security architecture reviews for cloud-native and hybrid solutions
- Execute cloud security assessments across AWS, Azure, and GCP environments
- Validate designs against NIST CSF, CIS Benchmarks, and CSA CCM
- Conduct cloud penetration testing following (CREST/CHECK methodologies)
- Assess container/Kubernetes security, serverless and microservices implementations
- Validate IaC security controls and CI/CD pipeline security
Compliance & Governance
- Lead compliance assessments: ISO 27017/27018, SOC 2, GDPR, NIS2, DORA
- Assess cloud governance frameworks and CSPM implementations
- Coordinate cloud security audits with internal/external teams
Identity & Data Protection
- Assess cloud IAM architectures and privileged access management
- Validate encryption, key management, and data residency controls
- Review SSO, MFA, and least privilege implementations, We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.
Requirements
Do you have experience in Terraform?, Do you have a Bachelor's degree?, * Bachelor's degree in Computer Science, Information Security, or Cybersecurity
- 6+ years in information security with cloud security focus
- 3+ years conducting cloud security assessments and architecture reviews
- Proven multi-cloud experience (AWS, Azure, GCP) in production environments
Technical Skills
- AWS: Security Hub, GuardDuty, IAM Access Analyzer, KMS, CloudTrail
- Azure: Defender for Cloud, Sentinel, Azure Policy, Key Vault
- GCP: Security Command Center, Cloud Armor, IAM, Cloud KMS
- Tools: Prisma Cloud, Wiz, Pacu, ScoutSuite, Prowler, Terraform
- Cloud penetration testing and threat modeling
Mandatory Certifications
- CISSP or CCSP
- AWS Security Specialty, Azure Security Engineer, OR GCP Professional Cloud Security Engineer
- CREST CRT/CCT (Cloud/Infrastructure) or equivalent
Preferred: Kubernetes security certification (CKS/CKAD)
KEY COMPETENCIES
- Senior-level stakeholder communication and presentation skills
- Strategic cloud security roadmap development
- Cross-functional collaboration with DevOps and Platform Engineering teams
We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.