Cloud Security (InfoSec) Specialist

BAE Systems Strategic Aerospace Services WLL | Full time

• Risk & Exception Management : Run risk assessments on cloud services / Servicesloads; propose compensating controls; operate exception register with expiry and review cadence.
• Identity & Access Governance : Design RBAC / ABAC models, SoD matrices, privileged access patterns, break‑glass procedures; lead quarterly access reviews with evidence capture.
• Data Protection : Classify data; specify encryption at rest / in transit; key management lifecycle (KMS / Key Vault / Cloud KMS), BYOK / HYOK guidance, DLP guardrails.
• Logging & Monitoring Requirements : Define mandatory telemetry (CloudTrail / Azure Activity / GCP Audit), retention / integrity controls, and SIEM onboarding schema / use cases.
• Posture Management (CSPM / CIEM / CNAPP) : Configure and tune policies; triage high‑severity findings; route ownership; track remediation SLAs and metrics.
• IR Enablement (Cloud) : Author cloud‑specific playbooks (privilege escalation, exposed storage, key compromise); define evidence collection and containment prerequisites for SOC.
• Compliance & Audit Readiness : Map controls to ISO 27001 / GDPR / NIA / Qatar Cloud Policy frameServices / etc.; produce test procedures and evidence plans; support audits without material findings.
• Stakeholder Communication : Clear, concise risk narratives and decision records for engineering leads, product owners, and auditors.

Nice‑to‑Have / Depth Areas

Requirements

#J-18808-Ljbffr