IT Cloud Security Consultant

Description:

Department: Security Operations

Duties: Essential Duties & Responsibilities Performs a combination of duties in accordance with departmental guidelines:

• Develops and coordinates CLIENT s Cloud Security strategy and define the transition to and adoption of secure cloud services, communicating with project stakeholders to effectively convey requirements of technical and process improvements.
• Accountable for the security of CLIENT's modern Google Cloud Platform, Google IaaS, PaaS (e.g. BigQuery), major SaaS services (e.g. Workday, Office 365, etc.), Azure platform, and similar platforms or set of services.
• Builds, leads and has full management responsibility for the performance and development of a team of experienced cloud security professionals.
• Designs and implements strategies and tactical plans to aid CLIENT s transition to the Cloud securely while keeping the information risk at an acceptable level.
• Based on business requirements, designs and implements cloud-native security frameworks and designs applying defense-in-depth strategies that will allow those requirements to be met with a minimal degree of risk to CLIENT and with appropriate security controls present.
• Comprehensive expert understanding in many areas of cloud, application development, infrastructure management and information security, with the ability to describe in business terms the impact of IT and cloud security policies, standards, and framework, and provide cloud security direction to business and IT personnel.
• Possesses and maintains a firm understanding of the offerings from Google Cloud and Azure for cloud security and their application to CLIENT.
• Accountable and responsible for the management and operation of any external cloud security solution (e.g. Prisma).
• Recommends tactical and strategic initiatives to eliminate or mitigate risks. Actively monitors and assesses new and emerging threats posing risk to cloud computing environments.
• Provides guidance and technical leadership in the development of security standards and guidelines for cloud infrastructure to conform to information enterprise architecture, risk profile and policy requirements.
• Documents and advises on areas of security improvement that balances risk with business operations and do not diminish efficiencies or innovation.
• In collaboration with Legal, identifies current and potential legal and regulatory issues affecting information security and assesses their impact on CLIENT s cloud services.
• Participates in Customer Assessment reviews of organization security controls when we store, process or transmit customers data in cloud environments.

May perform additional duties as assigned.

Skills: Skills, Knowledge & Abilities

• Expert level knowledge of cloud system architecture and key cloud security concepts.
• Track record of hiring and managing cloud security staff.
• Strong knowledge of the insurance industry, its products and services.
• Strong knowledge with Cloud platforms especially Google Cloud along with experience architecting security solutions for other cloud providers.
• Expert knowledge of Cloud methodologies (IaaS, PaaS, SaaS), automation, orchestration, cost frameworks, trends and industry-leading cloud vendor offerings and integrations.
• Hands-on experience configuring Cloud security services such as IAM, KMS, and CloudTrail and Google Cloud security services with appropriate security certifications.
• Experience with DevSecOps and Agile Methodologies along with experience with third-party Cloud security tools, and dealing with Cloud Native Application Architectures and their associated security implications.
• Ability to assess risks in line with information security objectives and risk tolerance of the institution. Proven conceptual, analytical and evaluation skills.
• Excellent interpersonal, verbal, presentation and written communication skills with the ability to effectively interact with internal and external business partners.
• Ability to work well independently, under pressure and to meet tight deadlines. Demonstrates a high level of motivation, confidence, and responsibility.
• Excellent project management skills and ability to organize and plan effectively to meet project goals.
• Keywords:
• Education: Education & Experience
• Bachelor s Degree with Master s preferred in Computer Science, or related discipline, or equivalent Typically a minimum of ten years of IT Security experience, with recent cloud security experience Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies Applicable certifications preferred (e.g. IT Security and Cloud) Skills and Experience:

Required Skills:

CLOUD SECURITY,

PAAS,

SAAS,

IAAS,

INFORMATION SECURITY,

Additional Skills:

SERVER VIRTUALIZATION,

GOVERNANCE,

GOOGLE CLOUD,

APPLICATION DEVELOPMENT,

PROJECT MANAGEMENT,

SECURITY POLICIES.

BUSINESS OPERATIONS,

PROCESS IMPROVEMENTS,

ENTERPRISE ARCHITECTURE,

BUSINESS REQUIREMENTS,

BIGQUERY,

MICROSOFT OFFICE 365,

AGILE,

IDENTITY AND ACCESS MANAGEMENT,

TECHNICAL LEADERSHIP,

WORKDAY,

SOFTWARE AS A SERVICE,

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.