Senior Cloud Security - 31251

Job Description

• Build and cultivate a security focused culture through partnership and collaboration with the business and technology teams
• Ensure technology risk impacting the business is effectively identified quantified communicated and managed including recommendations for resolution and identifying the root cause
• Proactively monitoring Key Risk Indicators to identify noncompliance and assist in remediation with compensating controls to address security risk and control gaps
• Serve as a point of escalation and subject matter expert for IT Risk and Cyber domains including vulnerability management data protection cloud and application security.
• Collaborate with team members and stakeholders on firmmandated audits and take responsibility in performing the required reviews associated with the audit
• Review IAM control standards objectives in regular basis and perform access reviews associated with it
• Be the trusted advisor to ensure security of designs and blueprints for application architectures and cloud platforms.
• Seen as the cloudsecurity and cloudcompliance SME by the teams you support.

• Minimum 5 to 6 years of experience in cloud security
• Hands on experience securing public cloud workloads in a hybrid corporate environment.
• Security risk and compliance experience with Cloud Platforms.
• Solid understanding of firewalls WAFs Web Gateways and IPS
• Practical understanding with Agile ITIL monitoring and metrics
• Experience in Security and regulatory compliance standards and frameworks
• Experience with identity and access management industry standard methodologies and related solutions (i.e. Active Directory Azure AD LDAP SSO MFA and related technologies)
• Experience of Secure Software Development Life Cycle (SSDLC) (e.g. code review risk assessments threat modeling static code analysis and dynamic application scanning)
• Knowledge of security controls configuration management and vulnerability management in public cloud.

security risk and compliance,security controls configuration management,vulnerability management,management,azure cloud,cloud security,cloud,identity and access management,secure software development life cycle (ssdlc),agile methodology