BENGALURU · FULLTIME
Sr. Consultant, Cloud Security
Cargill India
Bengaluru · onsite · Posted 43d ago
Sourced from
Not disclosed6–8 yrsfulltimeBengaluru
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.3s
- Found the form on Foundit · 9 questions to answer1.8s
- Decided the answers for all of them3.2s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Job Purpose and Impact
The Senior Cloud Security Consultant safeguards the organization's cloud estate by leading the design, implementation, and continuous improvement of security controls, guardrails, and governance across all public cloud platforms. This role serves as a trusted advisor and technical leader, driving enterprise cloud security strategy, standards, and posture improvement initiatives. With minimal supervision, the Senior Consultant partners with cybersecurity, cloud platform, infrastructure, engineering, risk, and business leaders to reduce cloud risk exposure and improve the security of cloud adoption at scale.
Key Accountabilities
The Senior Cloud Security Consultant safeguards the organization's cloud estate by leading the design, implementation, and continuous improvement of security controls, guardrails, and governance across all public cloud platforms. This role serves as a trusted advisor and technical leader, driving enterprise cloud security strategy, standards, and posture improvement initiatives. With minimal supervision, the Senior Consultant partners with cybersecurity, cloud platform, infrastructure, engineering, risk, and business leaders to reduce cloud risk exposure and improve the security of cloud adoption at scale.
Key Accountabilities
- Leading enterprise-wide cloud security programs across AWS, Azure, Google Cloud, and Oracle Cloud Infrastructure.
- Designing, implementing, and operating preventive guardrails – service control policies, Azure Policy, organization policies – that enforce security requirements by default.
- Analyzing cloud posture data from CSPM and CNAPP platforms and prioritizing findings by exposure, data sensitivity, business criticality, and compensating controls.
- Driving remediation accountability across platform and application teams, and governing security exceptions and risk acceptances.
- Leading cloud identity and access governance, including privileged access, federation, workload identity, secrets management, and least-privilege enforcement.
- Defining and maintaining enterprise cloud security standards, secure baselines, reference architectures, and landing zone requirements.
- Leading cloud security assessments and architecture reviews, and translating findings into prioritized remediation roadmaps.
- Designing automation, auto-remediation, and dashboards that improve control coverage, program efficiency, and reporting.
- Delivering executive-level reporting, metrics, and risk insights, and partnering with Incident Response, Threat Intelligence, and Security Architecture teams.
- Mentoring junior engineers and maintaining currency on cloud provider service changes, control frameworks such as CSA CCM and CIS Benchmarks, and emerging cloud attack techniques.
- CLOUD SECURITY STRATEGY & GOVERNANCE: Leads the design, implementation, operation, and continuous improvement of enterprise cloud security capabilities. Establishes standards, governance processes, performance metrics, and risk management practices to reduce cloud risk exposure.
- PREVENTIVE CONTROLS & GUARDRAIL ENGINEERING: Provides strategic and hands-on ownership of preventive cloud controls, ensuring insecure configurations are blocked by default and guardrail coverage keeps pace with cloud service adoption.
- CLOUD POSTURE & MISCONFIGURATION REMEDIATION: Develops and maintains enterprise risk models for cloud posture findings, ensuring remediation efforts focus on the most significant business and cybersecurity risks, and advances automated remediation where appropriate.
- CLOUD IDENTITY & ACCESS GOVERNANCE: Leads the definition and enforcement of identity, entitlement, and privileged access controls across cloud platforms to reduce identity-driven risk.
- COMPLIANCE & CONTROL ASSURANCE: Maintains traceability between enterprise control frameworks and cloud-native enforcement and detection, evidencing control effectiveness for audit, regulatory, and customer assurance needs.
- PROGRAM LEADERSHIP & CONTINUOUS IMPROVEMENT: Leads cross-functional initiatives that improve cloud asset visibility, control coverage, remediation performance, governance processes, and overall program maturity.
- EXECUTIVE COMMUNICATION & STAKEHOLDER MANAGEMENT: Communicates complex technical risks to executive leadership and business stakeholders, influencing strategic decisions and prioritization of remediation activities.
- Bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Systems, or a related technical field, or equivalent practical experience.
- 6+ years of cybersecurity experience, including 4+ years focused on cloud security engineering, architecture, or consulting.
- Hands-on experience securing enterprise cloud environments in at least one of AWS, Microsoft Azure, Google Cloud, or Oracle Cloud Infrastructure, with working knowledge of a second.
- Proven experience designing and operating preventive cloud guardrails – AWS service control policies, Azure Policy, Google organization policies, or equivalent policy-as-code enforcement – not detection and reporting alone.
- Strong expertise in cloud security architecture and cloud-native security controls across IaaS, PaaS, and SaaS, including network security, data protection, and key management such as Azure Key Vault or AWS KMS.
- Deep expertise in cloud identity and access management, including least-privilege role design, federation and workload identity, privileged access management, conditional access, and Zero Trust principles.
- Hands-on experience operating a CSPM or CNAPP platform at enterprise scale – Wiz, Microsoft Defender for Cloud, Prisma Cloud, AWS Security Hub, or equivalent – including onboarding, policy tuning, finding triage, and remediation ownership routing.
- Hands-on experience with infrastructure as code security and policy enforcement using Terraform, Bicep, ARM templates, or CloudFormation, and integrating security controls into CI/CD pipelines and DevSecOps practices.
- Proven experience conducting cloud security assessments, posture reviews, threat modeling, architecture reviews, and security control validation, and translating findings into prioritized remediation roadmaps.
- Strong knowledge of cloud security frameworks and standards including CSA Cloud Controls Matrix, CIS Benchmarks, NIST, ISO 27001, and cloud provider Well-Architected security principles.
- Experience driving remediation accountability across platform and application teams, governing security exceptions and risk acceptances, and communicating cloud risk to senior leaders and executive audiences.
- Experience supporting cloud security incident investigations as the cloud subject matter expert, in partnership with Incident Response and security operations teams – including compromised cloud identities and credentials, unauthorized access, data exposure, and misconfigured cloud resources.
- Working knowledge of cloud-native telemetry and audit sources such as AWS CloudTrail and GuardDuty, Azure Activity Logs and Microsoft Defender, and Google Cloud Logging, and their use in investigation, root cause analysis, and preventing recurrence.
- Cloud-specific certifications strongly preferred: CCSP, CCSK, AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Cybersecurity Architect Expert (SC-100), or Google Professional Cloud Security Engineer.
- CISSP or an equivalent broad security certification is preferred.
Sourced from foundit
Section · 02
Skills
Terraformgoogle cloud platformamazon web servicesIso 27001aws cloudformationnistCSPMCloud InfrastructureCIS Benchmarkszero trust principlesCNAPPMicrosoft AzureArm TemplatesbicepCSA Cloud Controls Matrix
Section · Company
About Cargill
Cargill India
Food Processing
3.5k+
employees
1865
161 years old
USA
US
₹10.7L PA avg
Avg at Cargill
About
Cargill is committed to providing food, ingredients, agricultural solutions, and industrial products to nourish the world in a safe, responsible, and sustainable way. Sitting at the heart of the supply chain, we partner with farmers and customers to source, make and deliver products that are vital for living.Our 160,000 team members—including our 3,500+ colleagues in India—innovate with purpose, providing customers with life’s essentials so businesses can grow, communities prosper, and consumers live well. With over 160 years of experience as a family company, we look ahead while remaining true to our values. We put people first. We reach higher. We do the right thing—today and for generations to come. For more information, visit Cargill.com and our News Center.In India, we have a strong presence of skilled professionals, primarily based in our Bengaluru and Gurugram offices, contributing across the following core areas:• Finance• Information Technology• Transport & Logistics• Strategic Sourcing & Procurement• Trade Execution• Human Resources
Industries
Food ProcessingAgricultureConsumer goodsFinancial ServicesManufacturingBPO
Employee ratings
0 reviews
3.9/ 5
Employees rate it well for
Work-Life Balance40Company Culture39
Find them on