Cloud Security & Governance Architect
Job Description
JOB DESCRIPTION
Role: Cloud Security & Governance Architect
Location: Abu Dhabi
Role Purpose:
- To ensure Cloud Security is audited and actions are taken
- Work closely with Security operations team and understand the current security posture w.r.t Patching, Security exceptions, Major Security Incident and take actions
- Work along with GRC team to create security awareness
- Develop, perform and analyse vulnerability assessments and penetration reports using generally accepted tools, and recommend remediations
Key Accountabilities of the role:
Operational Support
- Not applicable.
Communication
- Attend all the team meetings, one to one meeting to have a high level of communication culture.
- Timely response to email, tasks assigned and effective follow up with various stakeholders.
- Prepare projects status reports and submit to stakeholders on timely basis.
Documentation / Service Ownership
- The incumbent is responsible to take ownership, maintain & update documented processes or documentation related to his job function.
- In the event where processes or documentation are shared, the incumbent shall be responsible to inform the owner of any document about required changes or improvements.
People & Attendance
- Co-operate with the team members in a cohesive and professional manner and proactive good attendance habits and maintain the reporting hierarchy in all matters.
- The incumbent should adhere to working hours which might require working for extended hours depending on job nature and task assigned.
Information Security
- Maintain information security related to ADIB, throughout the period of employment.
- Ensure that data access is controlled and audited.
- As soon as possible, report any potential or actual risks or incidents affecting the security of information to the helpdesk.
- Maintain Risk Free/control IT environment at ADIB.
Specialist Skills / Technical Knowledge, Technical Competencies Required for this role:
Knowledge:
As a Cloud Security & Governance Architect must exhibit following special skills
- Perform review of vulnerability management reports and work closely with application SPOCs to mitigate
- Perform review of Cloud Security Posture with tools such as Azure Security Centre
- Perform review of patch management reports and work closely with respective teams (Cloud operations, Application) to remediate
- Review status of Azure policies and work with Cloud operations team to remediate
- Perform period review of IAM
- Define JML process
- Approve IAM user as part of JML process
- Strong understanding of Cloud Security Posture management, ability to review and take actions
- Review IAC security
- Work closely with the third-party vendors for Penetration testing
- Good understand of Azure Security Framework, Centre for Internet Security (CIS), NIST
- Strong understand of DevSecOps methodologies
- Should hold CISSP certification, AZ-500 is a plus
Required experience:
- Minimum 15+ years of experience in Security Governance and 4+ years of Cloud Security
Job Details
Employment Types:
Full time
Industry:
Banking / Accounting / Financial Services
Function:
IT
Roles:
Software Engineer / Programmer
Skills:
JML process Cloud Security Azure Technical support