Job highlights

- Implement Zero Trust principles and strengthenIdentity & Access Management (IAM). Key Attributes and Qualifications . 5+ years of experience in cybersecurity,compliance,or cloud securityroles,with expertise in automating security workflows and managing multi-cloudsecurity environments

Cloud Security & Compliance Specialist We are looking for an experiencedSecurity & Compliance Specialist to oversee the organizations CloudSecurity, ISO certifications, SOC 2 compliance, security audits, andgovernance. The candidate will ensure end-to-end security across cloudinfrastructure, applications, and data, conducting penetration testing, IT riskassessments, and security monitoring while managing security tools andcompliance frameworks.

Requirements

Responsibilities

- Oversee security for Azure Entra ID, AWS IAM,and Google IAM with a focus on identity security.
- Enforce multi-cloud security best practices,including encryption and data protection.
- Define and implement Zero Trust Architectureand secure cloud network segmentation.
- Establish and maintain IT security policiesand standards aligned with industry best practices.
- Implement and manage CSPM and CWPP tools toenhance cloud security posture.
- Manage ISO 27001, ISO 42001, and SOC 2certifications, ensuring compliance through audits.
- Conduct risk assessments and compliancereviews across multi-cloud environments.
- Ensure adherence to cloud security frameworks(ISO 27017, ISO 27018, CIS, NIST, CSA CCM).
- Drive security initiatives through GRCframeworks and governance models.
- Define and enhance IT security policies,conducting periodic audits for compliance and risk mitigation.
- Perform penetration testing and cloud-nativesecurity assessments, identifying misconfigurations and vulnerabilities.




- Integrate DevSecOps within CI/CD pipelines tofortify security in development workflows.
- Manage SIEM solutions (Azure Sentinel,Defender for Cloud) for real-time threat detection.
- Oversee Microsoft security tools (M365Defender, Intune, SCCM) for endpoint security.
- Investigate security incidents, perform rootcause analysis, and implement preventive measures.
- Automate security processes using PowerAutomate, Power BI, and scripting
- Secure cloud networking (Azure VNet, AWS VPC,GCP VPC) and enforce VPN & hybrid security.
- Implement Zero Trust principles and strengthenIdentity & Access Management (IAM).

Key Attributes and Qualifications

- 5+ years of experience in cybersecurity, compliance, or cloud securityroles, with expertise in automating security workflows and managing multi-cloudsecurity environments.
- Expertise in Cloud Security (Azure, AWS, GCP) and Microsoft SecurityStack with hands-on experience in SIEM, SOAR, EDR/XDR, CASB, CSPM, andvulnerability management.
- Preferred certifications include ISO/IEC 27001:2022 Lead Auditor,ISO/IEC 42001:2023 Lead Auditor, SOC 2 Compliance Certification, SecurityOperations Analyst (SC-200), Microsoft Certified: Cybersecurity ArchitectExpert (SC-100), AWS Certified Security u2013 Specialty, and Azure SecurityEngineer Associate (AZ-500).
- Solid understanding of Threat Intelligence, Risk Management,Compliance Audits, DevSecOps, Infrastructure as Code (IaC), and containersecurity (Kubernetes, Docker, EKS, AKS, GKE).
- Experience securing API gateways, microservices, and serverlessarchitectures while integrating security into CI/CD pipelines.
- Proven ability in security policy design, audits, complianceprocesses, penetration testing, vulnerability assessments, and cloud securitygovernance. ","

📌 Cloud Security & Compliance Specialist (Bengaluru)
🏢 tsworks
📍 Bengaluru