Information Security Officer (Cloud Security)

Deloitte is supporting a Tier 1 Global Bank in hiring experienced Information Security Officers to lead cloud security governance, security architecture and cyber risk management across large-scale technology platforms. This is a senior security role responsible for driving secure-by-design principles, identifying cyber risks and ensuring compliance with enterprise security policies.

Key Responsibilities

• Lead Information Security activities across supported technology and infrastructure functions.
• Identify opportunities to automate and standardise security controls.
• Identify, investigate and remediate security vulnerabilities across infrastructure and applications.
• Analyse source code to identify and mitigate security weaknesses.
• Review automated security testing results and prioritise remediation based on risk.
• Perform manual and automated security testing where required.
• Conduct Information Security risk assessments.
• Analyse root causes of vulnerabilities and recommend corrective actions.
• Work with engineering and business teams to deliver secure technical solutions.
• Contribute to enterprise security architecture across major technology programmes.
• Ensure cloud architectures align with corporate security policies and industry best practices.
• Assess security risks and define compensating controls where required.
• Translate business requirements into secure technical solutions.
• Recommend secure infrastructure platforms and cloud architectures.
• Influence security strategy and architectural decisions.
• Provide technical leadership across complex cloud security initiatives.

Qualifications

• Minimum 6 years’ IT experience, including at least 4 years in Cyber Security/Information Security across cloud and on-premises environments.
• Minimum 2 years securing AWS and/or GCP cloud environments.
• Experience conducting Information Security Risk Assessments and Security Governance.
• Strong understanding of AWS Well-Architected Framework and Google Cloud Security Command Center.
• Strong knowledge of AWS and GCP IAM security models.
• In-depth knowledge of cloud infrastructure including VPC, EC2, S3, Cloud Storage and Compute Engine.
• Familiarity with NIST, ISO 27001 and CSA STAR compliance frameworks.