Cyber Security Consultant – CSRO

Company Profile:
At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve. At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve results for our clients - and for our members. Come grow with us. Learn more at www.cgi.com.
This is a excellent prospect to join a winning team. CGI offers a competitive compensation package with opportunities for growth and professional development. Benefits for full-time, permanent members start on the first day of employment and include a paid time-off program and profit participation and stock purchase plans. We wish to thank all applicants for their interest and effort in applying for this position, however, only candidates selected for interviews will be contacted. No unsolicited agency referrals please.

Job Title: Cyber Security Consultant – CSRO
Position: Cyber Security Consultant – CSRO
Experience: 8+ Years
Category: IT Infrastructure
Main location: Bangalore/Chennai
Position ID: J0726-2590
Employment Type: Full Time

Job Summary
We are seeking a Cloud Security Engineer with a strong focus on AWS security governance and guardrails enforcement. This role emphasizes policy driven security, risk identification, and automated enforcement across complex enterprise environments using policy as code and IaC frameworks.

Key Responsibilities
. Design and enforce AWS security guardrails using SCPs, IAM policies, AWS Config, and Security Hub
. Implement preventive and detective controls aligned with enterprise security standards
.



Enforce Zero Trust and least privilege principles across cloud workloads
. Perform continuous risk assessments to identify misconfigurations, access risks, and security gaps, and drive remediation
. Develop and manage security policies as code using JSON/YAML based frameworks
. Enforce controls consistently through AWS policies, Config rules, Terraform modules, and ARM templates
. Maintain version controlled, reusable policy frameworks for scalable governance
. Enable continuous compliance monitoring, drift detection, and automated remediation
. Utilize Cortex (Prisma Cloud) / Wiz for cloud security posture management, threat detection, and risk prioritization
. Translate risk findings into actionable guardrails and enforceable controls
. Improve overall security coverage across cloud assets using a risk based approach
. Build secure by default Terraform modules for AWS environments
. Use Python and scripting to automate security enforcement, compliance validation, and remediation workflows
. Integrate security into CI/CD pipelines (GitHub Actions) to enable shift left enforcement
. Drive an automation first approach to support agile, consistent security enforcement at enterprise scale
. Support governance in Azure using Azure Policies and ARM templates as needed

Skills Required:

Strong AWS security expertise (IAM, SCPs, Config, Security Hub).Experience with policy as code and automated security enforcement.Hands on with Terraform, ARM templates, and JSON based policies.Familiarity with Cortex / Wiz (CNAPP tools).Proficiency in Python / scripting and CI/CD (GitHub Actions).Solid understanding of risk assessment, Zero Trust, and compliance frameworks.
Nice to Have
Azure security exposureAWS Security Specialty certification
This keeps it tight, security led, and enterprise focused, while clearly emphasizing:



Guardrails & enforcement Policy as code (JSON/Terraform/ARM) CNAPP (Cortex/Wiz) + risk based approach Automation for large scale environments

Preferred Qualifications:
We are looking for a Cloud Security Engineer with strong development and automation skills. The ideal candidate should have:
. Hands on experience with Azure and AWS services to perform risk assessments and implement security guardrails.
. Ability to develop and enforce security policies using CSPM/CNAPP
. Strong Infrastructure as Code skills with Terraform and ARM templates for secure deployments.
. Proficiency in PowerShell scripting
. Knowledge of Zero Trust principles, least privilege access, and integration of security controls into CI/CD pipelines.

Your future duties and responsibilities

Required qualifications to be successful in this role

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our team—one of the largest IT and business consulting services firms in the world.

📌 Cyber Security Consultant - CSRO (Bengaluru)
🏢 CGI
📍 Bengaluru