Cloud Security Engineer - Contract - Remote
- World Wide Technology
- 10 - 17 years
- Bengaluru
- 1 month ago
- Email to a friend
- Report this job
Job Description
Job Description:
Job Title: Senior Manager, Cloud Security
We have an exciting opportunity for an experienced cloud security manager to join a growing cloud security team in GSKs Cyber Security Office (CSO). You will work closely with senior stakeholders and cross-functional product teams to embed and enhance GSKs cloud security governance and capabilities, accelerating delivery of our business objectives, cloud migration and digital transformation initiative.
You will need to be comfortable working in a fast-paced agile environment and have experience working with multiple security and governance groups, central IT, developer and system integrator teams, based across multiple geographies and in different organizations.
This role offers the opportunity to use a wide range of skills to deliver an enterprise cloud security program supporting modern architecture patterns and technologies.
The ideal candidate will combine excellent technical skills and communication expertise with a collaborative approach to ensure optimal stakeholder alignment with our cloud security strategy.
Key Responsibilities
- Build and maintain cloud and container security governance frameworks for multi-cloud environment including Microsoft Azure, GCP and Kubernetes.
- Define and align cloud and container security standards, frameworks and policies with overall business and technology strategy and drive implementation of processes and tools to monitor and enforce compliance. Develop and evolve Cloud and Container Security reference architecture and security capabilities roadmaps
- Build and maintain a network of key stakeholders across security teams, central IT teams, business tech and developer groups to understand future state cloud requirements and roadmaps.
- Define and periodically review cloud service and container security controls and guidance documentation for Kubernetes and all IaaS & PaaS services, balancing business objectives with information and cyber security requirements.
- Define security guidance and best practice for Kubernetes and all IaaS & PaaS services to supplement security controls.
- Drive the cloud and container security conversation within cyber security office, central IT teams, business technical senior leadership and workload owners.
- Provide cloud and container security architecture review for large scale cloud projects and platforms providing recommended changes or enhancements to ensure alignment with secure by design principles.
- Provide cloud and container security consultancy to cyber risk assurance and governance risk and compliance teams for solution architecture reviews.
- Identify and communicate current and emerging security threats.
- Maintain technical skills and knowledge, keeping up to date with market trends and competitive insights.
Basic qualifications:
- Minimum of 8 years working as an information security professional and at least 3 years working as a cloud and/or container security professional.
- BSc level or equivalent education.
- Expert level security knowledge of Azure, GCP.
- Solid understanding of securing Kubernetes platforms and Container hosted workloads.
- Proven experience in security architecture and security by design reviews of cloud native solutions, leveraging containers, micro-services, APIs, PaaS capabilities such as data storage, databases and data processing technologies, and identity & access management suites on Azure, GCP.
- Proven experience of security reviews and threat modelling for cloud hosted solutions leveraging Generative AI cloud services.
- Demonstrated experience and understanding of cyber security principles, IT security controls, and related technologies and products.
- Demonstrated experience of network security related to cloud network virtualisation, Kubernetes networking and associated security controls.
- Demonstrated experience of identity and access management related to securing cloud and container platforms and workloads.
- Strong stakeholder management skills.
- Strong verbal/written communication in English, with the ability to effectively interact with professionals at all levels of responsibility and authority, both technical and non-technical.
- Ability to work with virtual teams located in different countries around the world, aligning and adapting different work, culture, and communication styles.
Should have / most important certs:
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Security Specialist (CKS)
Other desirable qualifications:
- Kubernetes and Cloud Native Associate (KCNA)
- Kubernetes and Cloud Security Associate (KCSA)
- Certified Kubernetes Application Developer (CKAD)
- Security based industry certification such as ISC2 CISSP
- Pharmaceutical industry experience would be a benefit but not essential.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information Security
Role Category: IT Security
Role: Cyber Security
Employement Type: Contract
Contact Details:
Company: World Wide TechnologyLocation(s): Bengaluru
Keyskills: Azure cloud security GCp Iaas Kubernetes PAAS
Similar positions
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in