Senior Information Security Specialist

Job Description

Summary :

The information security officer will mainly deal with Information Security Assets protection in deep technical environment. The person will Identify and assess potential security risks in the Cloud Operations Development, Test and Production environments and evaluate, specify, and propose appropriate organizational, procedural and technical security measures to mitigate the risk of a compromise of assets impacting the availability, confidentiality and integrity of services and data, corporate image or brand.

He / she will ensure Information Security is integrated into Operations activities. Ensure Compliance obligations are met always.

Support business requirements and manage information, services and infrastructure risks.

Ensure risks are treated in a consistent and effective manner.

Keep up to date with Information Security and Compliance trends.

Promote responsible security behaviour at .

Able to list cloud specific security requirements for each implementation scenario.

Main Responsibilities

With focus on public cloud implementations, he / she will :

Perform ideation, analysis, planning, Implementations & Remediation for Azure Policies / AWS Config

BAU and Operational Tasks for Azure Policies / AWS Config with appropriate documentation

Determine security gaps in cloud infra / setup

Translate Cloud related Risks and Issues and determine action plan for mitigation

Identify and assess potential security risks in the operations Test, Development and Production environments.

Evaluate, specify and propose appropriate organizational, procedural and technical security measures to mitigate the risk of a compromise to assets impacting the availability, confidentiality and integrity of services and data, corporate image or brand.

Support and track items relevant to Risk Mitigation.

Regularly review, assess and validate effectiveness of all controls.

Regularly review the compliance of implemented security policies, procedures and measures.

Analyse and control areas of responsibility affecting risk, security and compliance as well as conducting a performance review.

Handle Change Management Process

Skills & Knowledge Technical / Functional and Managerial

Good Experience with any 2 of 3 cloud technologies i.e. Azure / AWS / GCP

Any other Cloud Technology Platform considered a major plus.

Expertise in cloud security controls

Must have hands on experience on Cloud Security Architecture review and controls.

Solid Understanding of Cloud Computing and Infrastructure

Good understanding of Cloud networking, systems architecture, virtualization, docker containers

Relevant Job Experience

Min 5-6 years of experience in Cloud Services / Cloud Security

9+ years of IT Security

Education and Years of Experience

BE, B.Tech or MCA, MSc in Computer Science or equivalent

10+ years of overall experience out of which 4 years + experience should be in in exposure to Cloud Computing, Security and Architecture review.

Must have at least 2-3 certifications of these 6

Azure Admin (Az-104) Azure Security Engineer (Az-500)

AWS Solution Architect Associate AWS Security Specialty

GCP Cloud Engineer GCP Cloud Security Engineer

Good to have Industry Certification in Security (e.g. CISSP, CCSP, CCSK) and basic Scripting knowledge

Core Technical IT Background

Good understanding of security and auditing standards (e.g. ISO27000, PCI / DSS, SSAE18 etc.).

Ability to perform independent assessment of cloud supplier services and evaluations