Senior Manager/AVP - Cloud Security Analyst - BFSI

Senior Manager/AVP - Cloud Security

Job purpose :

- Cloud Security Analyst roles charter is to develop, build, and secure cloud information systems and will focus on identifying risks, implementing secure technology solutions, and securing Workday cloud systems

- Cloud Security Analyst would be working as a part of Information security team to ensure the Cloud Development and implementation is adopted securely in the bank for all projects. The cloud security Analyst will also ensure that all cloud implementation in the bank is in compliance with various global cloud security standards.

Duties and responsibilities :

- The Cloud Security Analyst should assess impact on Data Security & Privacy, Regulatory Compliance, Data Confidentiality, Service Availability, Data Integrity etc. by the implementation of cloud technologies in the bank.

- Assesses business viability of new cloud adoption requirements. Consults with other architects and senior level IT managers to assess and evaluate current Cloud strategies and related security requirements.

- Leads development of Cloud Security architectural principles to support business goals.

- Communicates various design options related to business risks and influences decision making aided with various architecture tools and models.

- The Cloud Security Analyst is expected to have a deep understanding of Cloud Security architecture, adoption patterns, Security best practices and recommendations aligned to frameworks from Cloud Security Alliance, SANS 20 and NIST in the deployment of a cloud solution.

- The Cloud Security Analyst will work with IT analyst, development teams and business management to identify strategic Cloud adoption requirements and produce or contribute to cloud consumption, strategy, and road-map and architecture artefacts.

The Cloud Security Analyst would be responsible for the various activities including, but not limited to :

- Review the cloud implementation programs to ensure that it is in line with the Cloud security requirements from various aspects such as Data security, implementation architecture, Legal and contractual requirements etc.

- Prepare and review cloud security checklists for various implementation types for the bank.

- Review the filled in checklists for Cloud security, Deployment architecture, Cloud Authentication to ensure that Cloud Deployment is in line with the information security requirements.

- Must have an understanding of the Cloud Security Alliance (CSA), Cloud Controls Matrix and how it can be leveraged for reviews of cloud solutions.

- Should provide security design recommendations based on enterprise information security architecture and solution patterns.

- Should provide guidance and assist in the development of cloud security standards for IT platforms in line with the information security architecture.

Qualifications :

- Must be a graduate of Bachelor's/College Degree in any IT or Computer-related course

- 4 to 5 years of total experience

- The Cloud security analyst must have 2-3 years of experience in risk identification of various cloud implementations, assessing impact on various regulatory and compliance aspects related to cloud implementation.

- Excellent interpersonal skills with Gravitas to influence decision makes who may or may not be with a technical background

- Should have knowledge of various cloud regulatory and compliance requirements for cloud implementations.

- Security consulting experience for at least 2 public or private cloud implementation.

- TOGAF, SABSA, or related methodology experience required, with a relevant certification.

- Experience in creating future Cloud operating model, roadmaps for various Business domains - Banking and target operating model for an organization operating in a hybrid model.

- Must have exposure to Data Security, Application Security, Infrastructure security & Risk and Compliance domain

- CSA or similar certifications desirable.

- Experience in reviewing new generation cloud implementations like Azure, AWS, Oracle, SmartCloud, etc.

- Knowledge of different Open source and vendor specific security solutions

Ankisha Maheshwari
+91 8982443444