Responsibilities
1. Cybersecurity Go-Live Readiness
- Track cybersecurity readiness for new systems, technology refreshes and migrations.
- Review go-live documentation, including risk assessments, system architecture, VAPT reports, hardening evidence and security plans.
- Coordinate with system owners, vendors and IT teams to resolve outstanding security requirements before go-live.
- Monitor post-go-live security actions and escalate unresolved risks.
2. Cloud Security & Access Management
- Administer Azure Role-Based Access Control (RBAC), privileged access and cloud permissions based on approved requests.
- Maintain access records and conduct periodic reviews of temporary or elevated privileges.
- Review AWS and Azure security configurations, including identity management, network security, encryption and access controls.
3. Cloud Security Posture Management (CSPM)
- Monitor cloud security posture and compliance findings using Microsoft Defender for Cloud, AWS Security Hub
- Assess security misconfigurations, vulnerabilities and compliance gaps, including validating findings and false positives.
- Prioritise findings, recommend remediation actions and coordinate with technical teams to resolve issues.
- Track remediation progress, validate closure evidence and escalate critical or overdue findings.
4. Security Compliance & Governance
- Support compliance assessments against government cybersecurity policies and security requirements.
- Assist with risk assessments, security exceptions, audit evidence and remediation tracking.
- Maintain cybersecurity documentation, SOPs, checklists and compliance records.
- Identify opportunities for process improvement and security automation.
5. Reporting & Stakeholder Coordination
- Prepare regular cybersecurity reports covering cloud security posture, go-live readiness, compliance gaps and remediation progress.
- Work closely with system owners, infrastructure teams and vendors.
- Provide technical guidance on AWS/Azure security configurations and vulnerability remediation.
Requirements
- Diploma or Degree in Cybersecurity, Computer Science, IT or a related field.
- Azure Security Engineer Associate (AZ-500) or equivalent certification strongly preferred.
- AWS Security, CISSP, CCSP, CISM or CRISC certifications are advantageous.
- Hands-on experience with Microsoft Azure security administration, including Azure RBAC, Entra ID, Azure Policy and privileged access management.
- Ability to support AWS cloud security configurations.
- Experience with Microsoft Defender for Cloud or equivalent CSPM tools.
- Good understanding of cloud security, IAM, network security, encryption, vulnerability management and compliance.
- Ability to interpret security assessment reports, system architecture diagrams and technical remediation evidence.
- Familiarity with cybersecurity operations, access management, change requests and risk tracking.
Good to have
- Knowledge of AWS Security Hub.
- Experience with Azure Log Analytics, Azure Workbooks or similar reporting tools.
- Exposure to cybersecurity go-live assessments, VAPT, system hardening and risk assessments.
- Scripting or automation experience for security reporting and remediation tracking.