Cloud Security Lead

Role & responsibilities

• Lead cloud security strategy, architecture, implementation and governance across AWS, Azure and GCP environments.
• Design and enforce cloud security policies, standards, controls and Zero Trust architecture.
• Manage Identity and Access Management (IAM), privileged access, encryption, secrets management and key rotation.
• Oversee cloud security posture management, vulnerability assessments, threat detection and remediation.
• Implement security automation and integrate security controls into CI/CD pipelines using DevSecOps practices.
• Lead cloud security incident response, threat hunting, root-cause analysis and disaster recovery planning.
• Ensure compliance with ISO 27001, SOC 2, PCI DSS and other applicable security and regulatory frameworks.
• Conduct cloud risk assessments, security audits, penetration-testing coordination and architecture reviews.
• Lead and mentor cloud security engineers, collaborate with DevOps, infrastructure and compliance teams, and report security risks to senior management.

Preferred candidate profile

• Bachelors degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
• 5 to 10 years of experience in cybersecurity, cloud security engineering, infrastructure security or related roles.
• Strong hands-on expertise in at least one major cloud platform: AWS, Microsoft Azure or Google Cloud Platform.
• Proven experience in cloud security architecture, IAM, network security, encryption, CSPM and security monitoring.
• Knowledge of DevSecOps, CI/CD security, Terraform, Kubernetes, Docker and Infrastructure as Code.
• Experience with SIEM platforms, incident response, vulnerability management and security automation using Python or Bash.
• Working knowledge of security frameworks and compliance standards, including ISO 27001, NIST, SOC 2 and PCI DSS.
• Relevant certifications such as CISSP, CCSP, AWS Certified Security – Specialty or Azure Security Engineer Associate are preferred.
• Strong leadership, analytical, problem-solving, communication and stakeholder-management skills.
• Ability to lead security initiatives, manage cross-functional teams and translate business risks into practical security solutions.