We are looking for a Senior Security Specialist to lead security governance efforts across PT and strengthen our cloud security posture especially in Microsoft Azure environments.
Our ideal candidate has a strong foundation in security governance (e.g. frameworks policies vulnerability management) and working experience with cloud security. However we are also open to experienced cloud security experts who are eager to expand into governance and compliance responsibilities.
This role is critical in aligning security strategy with business and regulatory requirements supporting secure cloud operations and collaborating with both internal stakeholders and external security consultants.
Key Responsibilities
Security Governance (Primary Focus)
Define and implement the departments security governance strategy aligned with internal policies and industry standards (e.g. NIST CSF ISO 27001).
Coordinate vulnerability management programs including prioritization remediation tracking and risk reporting.
Oversee the development and enforcement of security policies standards and procedures.
Support compliance audits and risk assessments translating technical risks into business terms.
Cloud Security (Secondary Focus / Optional Priority)
Collaborate with cloud teams to enhance Azure security posture implement controls and maintain visibility.
Contribute to secure configuration and management of Azure services including Defender for Cloud Sentinel Azure Policy RBAC PIM and monitoring tools.
Provide guidance during cloud security incidents and support incident response coordination and root cause analysis.
Support security by design in cloud-based projects and deployments.
Communication
Serve as a bridge between security consultants engineering teams and business stakeholders.
Resolve incidents especially those involving cloud platforms or external threats.
Present complex security topics clearly to both technical and non-technical audiences.
Support a culture of continuous improvement risk awareness and accountability in security practices.
Qualifications :
Must-Have
- Proven experience in security governance including:
- Policy and control frameworks (e.g. NIST CSF ISO 27001)
- Vulnerability management lifecycle
- Risk management and compliance
- Working knowledge or hands-on experience with Azure or other public cloud.
- Ability to coordinate cross-functional teams (incl. external vendors)
- Familiarity with web application and API security (e.g. OWASP Top 10 secure coding practices).
Nice to Have / Alternate Profiles
- Deep Azure cloud security expertise ideally with experience in cloud security design implementation and tooling.
- Experience with DevSecOps cloud-native security tooling or automation of cloud security controls.
- Background in incident response in hybrid or cloud-native environments.
Education:
- Bachelors degree in Computer Science Information Technology or a related field;
Certifications (Preferred Not Required)
- AZ-500 Microsoft Azure Security Engineer Associate
- SC-100 Microsoft Cybersecurity Architect Expert
- CISSP CCSP or similar security governance certifications
Remote Work :
No
Employment Type :
Full-time
We are looking for a Senior Security Specialist to lead security governance efforts across PT and strengthen our cloud security posture especially in Microsoft Azure environments.Our ideal candidate has a strong foundation in security governance (e.g. frameworks policies vulnerability management) an...
We are looking for a Senior Security Specialist to lead security governance efforts across PT and strengthen our cloud security posture especially in Microsoft Azure environments.
Our ideal candidate has a strong foundation in security governance (e.g. frameworks policies vulnerability management) and working experience with cloud security. However we are also open to experienced cloud security experts who are eager to expand into governance and compliance responsibilities.
This role is critical in aligning security strategy with business and regulatory requirements supporting secure cloud operations and collaborating with both internal stakeholders and external security consultants.
Key Responsibilities
Security Governance (Primary Focus)
Define and implement the departments security governance strategy aligned with internal policies and industry standards (e.g. NIST CSF ISO 27001).
Coordinate vulnerability management programs including prioritization remediation tracking and risk reporting.
Oversee the development and enforcement of security policies standards and procedures.
Support compliance audits and risk assessments translating technical risks into business terms.
Cloud Security (Secondary Focus / Optional Priority)
Collaborate with cloud teams to enhance Azure security posture implement controls and maintain visibility.
Contribute to secure configuration and management of Azure services including Defender for Cloud Sentinel Azure Policy RBAC PIM and monitoring tools.
Provide guidance during cloud security incidents and support incident response coordination and root cause analysis.
Support security by design in cloud-based projects and deployments.
Communication
Serve as a bridge between security consultants engineering teams and business stakeholders.
Resolve incidents especially those involving cloud platforms or external threats.
Present complex security topics clearly to both technical and non-technical audiences.
Support a culture of continuous improvement risk awareness and accountability in security practices.
Qualifications :
Must-Have
- Proven experience in security governance including:
- Policy and control frameworks (e.g. NIST CSF ISO 27001)
- Vulnerability management lifecycle
- Risk management and compliance
- Working knowledge or hands-on experience with Azure or other public cloud.
- Ability to coordinate cross-functional teams (incl. external vendors)
- Familiarity with web application and API security (e.g. OWASP Top 10 secure coding practices).
Nice to Have / Alternate Profiles
- Deep Azure cloud security expertise ideally with experience in cloud security design implementation and tooling.
- Experience with DevSecOps cloud-native security tooling or automation of cloud security controls.
- Background in incident response in hybrid or cloud-native environments.
Education:
- Bachelors degree in Computer Science Information Technology or a related field;
Certifications (Preferred Not Required)
- AZ-500 Microsoft Azure Security Engineer Associate
- SC-100 Microsoft Cybersecurity Architect Expert
- CISSP CCSP or similar security governance certifications
Remote Work :
No
Employment Type :
Full-time
View more
View less