Job Description

Position: Lead Analyst – Information Security

Location: Mumbai
Experience: 5–10+ years

Role Overview

We are looking for an experienced Information Security professional with strong expertise in Cloud Security, Cloud Architecture, and IT Infrastructure. The role will focus on end-to-end cloud security solution reviews, security architecture assurance, cloud security posture management, compliance, risk assessment, and secure cloud development practices.

Strong hands-on experience with Microsoft Azure is required. Experience across AWS/GCP and exposure to AI Security will be an added advantage.

Key Responsibilities

- Conduct end-to-end security reviews of cloud technology solutions across Azure, AWS, M365, SaaS, PaaS and IaaS, ensuring security-by-design principles.
- Perform technical assessments of on-premises and cloud solutions to identify misconfigurations, vulnerabilities, deviations from best practices, and potential attack vectors.
- Evaluate cloud security solutions against threat models, risk assessments, and frameworks such as NIST CSF, CSA CCM, ISO 27001 and CIS Benchmarks.
- Provide security architecture recommendations and guidance to Risk, Information Security and Enterprise IT leadership.
- Lead Cloud Security Posture Management (CSPM) reviews using CNAPP platforms covering CSPM, CIEM, cloud workload and container security.
- Conduct cloud compliance assessments against standards such as GDPR, HIPAA,



PCI DSS and SOC 2.
- Review cloud security policies, procedures, hardening standards and configurations against organizational and industry best practices.
- Partner with Enterprise IT and DevOps teams to embed security across the SDLC and CI/CD pipelines.
- Review Infrastructure as Code (IaC) templates and automation scripts and provide recommendations for secure implementation.
- Participate in cloud attack path analysis and recommend preventative and detective security controls.
- Track security vulnerabilities and misconfigurations and work with relevant teams to ensure timely remediation.
- Contribute to the continuous improvement of cloud security governance frameworks and processes.
- Provide subject matter expertise for cloud security incident response and forensic readiness.

Required Experience

- 5–10+ years of progressive experience in Information Security, with 4–7+ years specifically focused on Cloud Security architecture, engineering and security reviews.
- Strong hands-on experience with cloud security services across Microsoft Azure, AWS and/or GCP.
- Solid IT Infrastructure and Cloud Security background.
- Experience in security assessments, penetration testing and/or vulnerability management in cloud environments.
- Proven experience designing and reviewing secure cloud architectures for complex enterprise environments.

📌 Cloud Security Architect – Azure & Multi-Cloud 5 - 10 Years | Job Location : Mumbai
🏢 Wns Global Services
📍 Mumbai