Responsibilities of the Candidate:

• Conduct and lead threat-based risk assessments for cloud infrastructures and applications.
• Evaluate cloud security architecture and controls to ensure compliance with policies and standards.
• Advise clients on developing and implementing security controls and Information Security Management Systems (ISMS).
• Prepare risk assessment reports for internal and external stakeholders.
• Investigate and respond to security incidents, breaches, and security events.
• Develop and maintain incident response plans, playbooks, and procedures.
• Collaborate with various teams, including IT, legal, and compliance, to handle incidents appropriately.
• Demonstrate teamwork and collaborate with other teams to ensure client’s cloud environment is secure

Requirements:

• Strong understanding of cloud technologies and platforms: Azure/AWS/GCP/OCI
• Understanding of cloud security architecture
• Understanding of Zero trust principle, security technologies and controls:
• AWS/Azure/GCP/OCI cloud native security controls, Identity Access Management, Data Security, IDS/IPS, SIEM, web application firewall, cryptography, Kubernetes, container security etc.
• Should have conducted cloud security assessments and configuration reviews as per industry best practices
• Familiarity with industry-leading standards and frameworks such as ISO 27001, NIST, CSA CCM, CIS benchmarks to help clients adhere to compliance requirements
• Knowledge and experience of Risk Management Lifecycle (Risk Identification, Risk Assessment, Risk Response, & Reporting)
• Experience with cloud security tools and services
• Knowledge and experience in developing/creating cloud security policies and frameworks for organizations
• Effective written and communication skills
• Strong sense of ownership, urgency, and drive.