Skills

1. Knowledge of cloud computing concepts and technologies, including virtualization, storage, networking, and containers

2. Understanding of cloud security frameworks and best practices, such as the Cloud Security Alliance (CSA) Cloud Controls Matrix and the Center for Internet Security (CIS) Amazon Web Services Foundations Benchmark

3. Experience with cloud security services and tools, such as AWS Security Hub, and Google Cloud Security Command Center

4. Familiarity with regulatory compliance requirements, such as PCI DSS, and GDPR, and their impact on cloud deployed workloads.

5. Ability to perform cloud risk assessments and develop cloud security strategies.

6. Understanding of cloud-native security solutions, such as serverless computing and DevSecOps.

7. Knowledge of hybrid cloud architectures and how to secure them.

8. Ability to design and implement cloud security solutions that balance security requirements with business needs.

9. Understanding of cloud migration and how to manage security risks during the migration process.

Experiences

1. 03 years cloud security experience

2. 03 years combined experience on GCP and AWS.

3. In total 5-7 years relevant security experience

Scope of work.

1. Act as a subject matter expert for all cloud security requirements

2. Work with the enterprise architects and enterprise security architects to design, develop and documents cloud security architectures for applications.

3. Create and review, checklists / best practices for cloud security.

4. Assessing the organization's cloud security posture and identifying potential vulnerabilities

5. Developing security policies, procedures, and standards for cloud-based services and applications

6. Designing secure cloud architecture that meets business and security requirements.

7. Ensuring compliance with industry regulations and standards for cloud-based services and applications.

8. Conducting risk assessments and developing risk management strategies for cloud-based systems and data.

9. Reviewing and approving security-related projects and initiatives related to cloud-based services and applications.

10. Developing and implementing cloud security controls such as encryption, identity and access management, and network security.

11. Collaborating with other IT teams and departments to ensure security is integrated into all aspects of the organization's cloud infrastructure.