Senior Information Security Specialist

\n Job Description
\n Summary:
\n The information security officer will mainly deal with Information Security Assets protection in deep technical environment. The person will Identify and assess potential security risks in the Cloud Operations Development, Test and Production environments and evaluate, specify, and propose appropriate organizational, procedural and technical security measures to mitigate the risk of a compromise of assets impacting the availability, confidentiality and integrity of services and data, corporate image or brand.
\n He / she will ensure Information Security is integrated into Operations activities. Ensure Compliance obligations are met always.
\n Support business requirements and manage information, services and infrastructure risks.
\n Ensure risks are treated in a consistent and effective manner.
\n Keep up to date with Information Security and Compliance trends.
\n Promote responsible security behaviour at .
\n Able to list cloud specific security requirements for each implementation scenario.
\n Main Responsibilities
\n With focus on public cloud implementations, he / she will:
\n Perform ideation, analysis, planning, Implementations & Remediation for Azure Policies / AWS Config
\n BAU and Operational Tasks for Azure Policies / AWS Config with appropriate documentation
\n Determine security gaps in cloud infra / setup
\n Translate Cloud related Risks and Issues and determine action plan for mitigation
\n Identify and assess potential security risks in the operations Test, Development and Production environments.
\n Evaluate, specify and propose appropriate organizational, procedural and technical security measures to mitigate the risk of a compromise to assets impacting the availability, confidentiality and integrity of services and data, corporate image or brand.
\n Support and track items relevant to Risk Mitigation.
\n Regularly review, assess and validate effectiveness of all controls.
\n Regularly review the compliance of implemented security policies, procedures and measures.
\n Analyse and control areas of responsibility affecting risk, security and compliance as well as conducting a performance review.
\n Handle Change Management Process
\n Skills & Knowledge Technical / Functional and Managerial
\n Good Experience with any 2 of 3 cloud technologies i.e. Azure / AWS / GCP
\n Any other Cloud Technology Platform considered a major plus.
\n Expertise in cloud security controls
\n Must have hands on experience on Cloud Security Architecture review and controls.
\n Solid Understanding of Cloud Computing and Infrastructure
\n Good understanding of Cloud networking, systems architecture, virtualization, docker containers
\n Relevant Job Experience
\n Min 5-6 years of experience in Cloud Services / Cloud Security
\n 9+ years of IT Security
\n Education and Years of Experience
\n BE, B.Tech or MCA, MSc in Computer Science or equivalent
\n 10+ years of overall experience out of which 4 years + experience should be in in exposure to Cloud Computing, Security and Architecture review.
\n Must have at least 2-3 certifications of these 6
\n Azure Admin (Az-104) Azure Security Engineer (Az-500)
\n AWS Solution Architect Associate AWS Security Specialty
\n GCP Cloud Engineer GCP Cloud Security Engineer
\n Good to have Industry Certification in Security (e.g. CISSP, CCSP, CCSK) and basic Scripting knowledge
\n Core Technical IT Background
\n Good understanding of security and auditing standards (e.g. ISO27000, PCI/DSS, SSAE18 etc.).
\n Ability to perform independent assessment of cloud supplier services and evaluations