Information Security Officer (Cloud Security)
HybridLondon, England, United Kingdom
London, England, United KingdomHybridContractSenior LevelEnterprise
ContractSenior LevelEnterprise
Job Summary
Lead Information Security activities across technology and infrastructure functions by identifying, investigating, and remediating vulnerabilities in applications and cloud environments. Conduct risk assessments, analyze source code for weaknesses, and review automated testing results to prioritize remediation. Drive secure-by-design principles by translating business requirements into secure technical solutions and influencing architectural decisions for AWS and GCP platforms. Work with engineering and business teams to deliver secure infrastructure, standardize controls, and recommend compensating controls where required.
Required Qualifications
- Minimum 6 years' IT experience, including at least 4 years in Cyber Security/Information Security across cloud and on-premises environments
- Minimum 2 years securing AWS and/or GCP cloud environments
- Experience conducting Information Security Risk Assessments and Security Governance
- Strong understanding of AWS Well-Architected Framework and Google Cloud Security Command Center
- Strong knowledge of AWS and GCP IAM security models
- In-depth knowledge of cloud infrastructure including VPC, EC2, S3, Cloud Storage and Compute Engine
- Familiarity with NIST, ISO 27001 and CSA STAR compliance frameworks
- Experience engaging with Information Security, Risk, Control & Compliance, Architecture and Project teams
- Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS
- Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security and network segmentation
- Ability to design and review secure technical architectures
- Experience reviewing Infrastructure as Code using Terraform and/or CloudFormation
- Strong understanding of SDLC and CI/CD pipelines
- Hands-on Python scripting experience
- Associate or Professional AWS or GCP Cloud Certification
- Associate or Professional Cyber Security Certification
- Bachelor's degree in Computer Science, Cyber Security or related discipline (or equivalent experience)
Desired Qualifications
- CISSP, CISM or CCSP
- AWS Solutions Architect or Google Professional Cloud Security Engineer certifications
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.