Cloud Security (InfoSec) Specialist

Job Description

• Cloud Governance and Standards
• Risk & Exception Management : Run risk assessments on cloud services / Servicesloads; propose compensating controls; operate exception register with expiry and review cadence.
• Identity & Access Governance : Design RBAC / ABAC models, SoD matrices, privileged access patterns, break-glass procedures; lead quarterly access reviews with evidence capture.
• Data Protection : Classify data; specify encryption at rest / in transit;  key management lifecycle (KMS / Key Vault / Cloud KMS), BYOK / HYOK guidance, DLP guardrails
• Logging & Monitoring Requirements : Define mandatory telemetry (CloudTrail / Azure Activity / GCP Audit), retention / integrity controls, and SIEM onboarding schema / use cases.
• Posture Management (CSPM / CIEM / CNAPP) : Configure and tune policies; triage high-severity findings; route ownership; track remediation SLAs and metrics.
• IR Enablement (Cloud) : Author cloud-specific playbooks (privilege escalation, exposed storage, key compromise); define evidence collection and containment prerequisites for SOC.
• Compliance & Audit Readiness : Map controls to ISO 27001 / GDPR / NIA / Qatar Cloud Policy frameServices / etc.; produce test procedures and evidence plans; support audits without material findings.
• Stakeholder Communication : Clear, concise risk narratives and decision records for engineering leads, product owners, and auditors.
• Nice-to-Have / Depth Areas :
• DevSecOps Oversight : Policy-as-code checks (OPA / Kyverno / Conftest), IaC compliance gates (Terraform / ARM / Bicep), artifact integrity   (signing / SBOM / SLSA) governance focus.
• Kubernetes / Container Governance : Pod Security Standards, admission policy governance, registry controls, and runtime policy baselines.
• SaaS Security Reviews : Due diligence and ongoing assurance for high-risk SaaS (identity, data residency, logging, export controls).
• Data Residency & Sovereignty : Regulatory mapping and guardrail design for regional constraints.

Requirements