IT&Data Cloud Security Posture Analyst

Job Description:

• Role Summary
• The IT Data Cloud Security Posture Analyst is responsible for monitoring assessing and improving the security posture of Danone s cloud environments across Azure AWS GCP and SaaS platforms
• The role ensures cloud services comply with cybersecurity policies security baselines and regulatory requirements while supporting proactive identification and remediation of cloud security risks
• The position collaborates with Cloud Engineering Infrastructure Application Security Operations Risk and Compliance teams to strengthen cloud governance and ensure secure cloud adoption across the organization

Key Responsibilities:

• Key Responsibilities
• Cloud Security Governance Compliance
• Support implementation of cloud security standards policies and controls
• Monitor compliance with cloud security baselines and regulatory requirements
• Ensure cloud environments adhere to security best practices and governance standards
• Cloud Security Posture Management
• Monitor CSPM dashboards and security posture indicators
• Identify cloud misconfigurations excessive permissions exposed resources and security gaps
• Support remediation activities with cloud platform teams and application owners
• Track security posture improvements and risk reduction initiatives
• Cloud Risk Assessment
• Perform cloud security assessments for new and existing cloud services
• Identify risks associated with cloud deployments and recommend mitigation actions
• Support cloud architecture reviews from a cybersecurity perspective
• Reporting Stakeholder Management
• Develop cloud security dashboards KPIs and posture reports
• Provide recommendations for improving cloud security maturity
• Work closely with cloud architects engineers and business stakeholders
• Continuous Improvement
• Support cloud security automation initiatives
• Contribute to cloud security awareness and best practice adoption
• Stay informed about emerging cloud threats and security technologies
• Required Skills Competencies
• Functional Technical Skills
• Cloud security fundamentals Azure AWS and or GCP
• Cloud Security Posture Management CSPM
• Identity and Access Management IAM
• Cloud governance and risk management
• Knowledge of security frameworks NIST ISO 27001 CIS Benchmarks
• Cloud security monitoring and reporting capabilities

Technical Requirements:

• Behavioral Competencies
• Analytical mindset
• Strong stakeholder management skills
• Problem solving capabilities
• Attention to detail
• Continuous learning attitude
• Good to Have Functional Technical Skills
• Microsoft Defender for Cloud
• Wiz Prisma Cloud Orca Lacework or equivalent CSPM solutions
• Infrastructure as Code Terraform ARM Bicep
• Cloud container security and Kubernetes security
• Knowledge of GDPR NIS2 and DORA requirements
• Behavioral Competencies
• Project coordination skills
• Change management experience

Preferred Skills:

Technology->Infrastructure Security->Cloud Security,Technology->Cloud Security->AWS - GRC,Technology->Cloud Security->Microsoft Azure - Infrastructure security->Azure Update Management,Foundational->Development process generic->SaaS Development Process->SaaS