Description

You will design and implement enterprise-wide cloud security, risk management, and compliance strategies.

Responsibilities

• Develop security plans, internal control frameworks, and key risk indicators for enterprise projects.
• Lead risk, security, and compliance audits and assessments across the organization.
• Guide project teams on application security, data protection, and API security protocols.
• Direct remediation efforts for common application vulnerabilities and implement API protection practices.
• Monitor emerging IT security trends and evaluate new technologies in the information systems industry.
• Educate colleagues through compliance training programs and security awareness initiatives.

Required Skills

• 14+ years of experience in IT, enterprise architecture, and the software development life cycle.
• Hands-on experience with Infrastructure as Code (IaC).
• Deep understanding of DevSecOps and Policy-as-Code methodologies.
• Strong expertise in API security and protecting data integrity.
• Knowledge of security protocols, cryptography, authentication, and authorization.
• Working knowledge of OWASP Top 10 or SANS 25 web vulnerabilities.
• Familiarity with Artificial Intelligence, Machine Learning, and Generative AI.
• Experience with GCP, AWS, or Microsoft cloud environments.
• Ability to collaborate with senior management stakeholders.

Preferred Skills

• Certified Information Systems Security Professional (CISSP).
• GCP, AWS, or Microsoft Certified Cloud Solution Architect certification.

Key Skills

Education

Any Gradute