Information Security Officer - AWS, CISSP, CISM, CCSP

The client is seeking an experienced Information Security Officer to help drive the security strategy, governance, and risk management activities across cloud and technology environments. You will work closely with technology and business teams to identify security risks, implement effective controls, and ensure solutions are designed and operated securely.

This is a highly visible role requiring strong technical security expertise, stakeholder management skills, and experience securing modern cloud platforms.

Key Responsibilities

• Drive the implementation and continuous improvement of information security controls.
• Identify, assess, and mitigate security risks across applications, infrastructure, and cloud environments.
• Conduct security reviews, vulnerability assessments, and risk analysis.
• Analyse security findings and coordinate remediation activities with engineering teams.
• Review application and infrastructure security controls and recommend improvements.
• Support secure solution design and ensure alignment with security policies and best practices.
• Provide security guidance on architecture, cloud platforms, and technology initiatives.
• Work with stakeholders to balance security, risk, and business objectives.
• Contribute to the development of security standards, governance processes, and technology roadmaps.

• Strong experience within Information Security, Cyber Security, Risk Management, or Security Architecture.
• Hands-on knowledge of AWS and/or Google Cloud Platform (GCP) security architectures.
• Experience securing cloud services including networking, compute, storage, IAM, and infrastructure services.
• Strong understanding of cloud security frameworks and best practices.
• Knowledge of security and compliance frameworks such as NIST, ISO 27001, and CSA STAR.
• Experience conducting security risk assessments and managing remediation activities.
• Strong stakeholder management and communication skills.
• Ability to explain complex security concepts to both technical and non-technical audiences.

Desirable Skills

• Experience with Infrastructure as Code security (Terraform, CloudFormation).
• Cloud security certifications such as CISSP, CISM, CCSP, AWS Security Specialty, AWS Solutions Architect, or GCP Professional Cloud Security Engineer.
• Previous experience within a large-scale enterprise or regulated environment