Cloud Security (InfoSec) Specialist

Job Description

Job Specific Skills

• Cloud Governance and Standards.
• Risk & Exception Management : Run risk assessments on cloud services / Servicesloads; propose compensating controls; operate exception register with expiry and review cadence.
• Identity & Access Governance : Design RBAC / ABAC models, SoD matrices, privileged access patterns, break-glass procedures; lead quarterly access reviews with evidence capture.
• Data Protection : Classify data; specify encryption at rest / in transit; key management lifecycle (KMS / Key Vault / Cloud KMS), BYOK / HYOK guidance, DLP guardrails.
• Logging & Monitoring Requirements : Define mandatory telemetry. (CloudTrail / Azure Activity / GCP Audit), retention / integrity controls, and SIEM onboarding schema / use cases.
• Posture Management (CSPM / CIEM / CNAPP) : Configure and tune policies; triage high‑severity findings; route ownership; track remediation SLAs and metrics.
• IR Enablement (Cloud) : Author cloud‑specific playbooks (privilege escalation, exposed storage, key compromise); define evidence collection and containment prerequisites for SOC.
• Compliance & Audit Readiness : Map controls to ISO 27001 / GDPR / NIA / Qatar Cloud Policy frameServices / etc.; produce test procedures and evidence plans; support audits without material findings.
• Stakeholder Communication : Clear, concise risk narratives and decision records for engineering leads, product owners, and auditors.

Nice‑to‑Have / Depth Areas

Minimum Qualification

Bachelor’s in computer science, Information Security, IT and equivalent hands‑on experience.

Certifications

Minimum Experience

3–5+ years cloud security (governance / assurance) with hands‑on in at least one major cloud.

#J-18808-Ljbffr