Cloud Platform Security Lead

AXA Group; Tunbridge Wells; Hybrid; GBP 68,000 - 108,000; Full time

Job summary

AXA Group is seeking a Cloud Platform Security Lead to guide platform security across AWS and Azure environments. The role emphasizes cloud security architecture, governance reporting to senior stakeholders, and leadership of security programs within a complex, regulated enterprise.

The candidate will drive security-by-design principles, IaC integration, and continuous improvement of security controls, working closely with cyber security operations and enterprise governance teams.

Qualifications

• Cloud security architecture and engineering expertise.
• Experience securing large-scale cloud platforms, with Azure preferred.
• Ability to present security risk and governance reports to leadership audiences.
• Experience designing and implementing cloud security controls and guardrails.
• Evidence of prior coaching, mentoring, and team leadership.
• Competence in implementing security standards aligned to ISO27001, NIST, CIS, or SOC2.
• Good understanding of policy-as-code and infrastructure-as-code practices.
• Proficiency in operating within regulated or enterprise-scale environments.

Responsibilities

• Provide technical security guidance to drive our platform security to the highest standard.
• Drive the adoption and implementation of cloud security solutions and practices.
• Work closely with our Cyber Security operational teams.
• Define, produce, and present security posture metrics, risk reports, compliance status, and governance dashboards for AWS and Azure platforms to senior leadership and stakeholders.
• Implement and continuously improve preventative, detective, and corrective security controls, guardrails, and policy enforcement across cloud platform services.
• Review, challenge, and approve cloud platform architectures and designs, ensuring alignment with enterprise security, regulatory, and technology standards.
• Drive security-by-design principles and integrate security controls into cloud services, IaC, automation frameworks, and CI/CD pipelines.
• Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines and escalated where required.
• Maintain compliance with internal policies, regulatory requirements, audit controls, and industry frameworks, ensuring audit readiness and timely remediation of control gaps.
• Identify, assess, prioritize, mitigate, and report security risks, exceptions, and technical debt, ensuring risks are managed within approved risk tolerances.

Skills

Cloud security architecture

Cloud security engineering

Azure security

Security risk reporting

Policy as code

Infrastructure as code

Team leadership

Security standards ISO27001/NIST/CIS/S

Regulated environments

Governance dashboards

Tools

CI/CD tooling

Cloud platforms

Job description

Salary: £68,000 - 108,000 per year

Requirements:

• Cloud security architecture and engineering expertise
• Significant experience securing large-scale cloud platforms, with Azure preferred
• Ability to present security risk and governance reports to leadership audiences
• Experience designing and implementing cloud security controls and guardrails
• Evidence of prior coaching, mentoring, and team leadership
• Competence in implementing security standards aligned to frameworks such as ISO27001, NIST, CIS, or SOC2
• Good understanding of policy-as-code and infrastructure-as-code practices
• Proficiency in operating within regulated or enterprise-scale environments

Responsibilities:

• Provide technical security guidance to drive our platform security to the highest standard
• Drive the adoption and implementation of cloud security solutions and practices
• Work closely with our Cyber Security operational teams
• Define, produce, and present security posture metrics, risk reports, compliance status, and governance dashboards for AWS and Azure platforms to senior leadership and stakeholders
• Implement and continuously improve preventative, detective, and corrective security controls, guardrails, and policy enforcement across cloud platform services
• Review, challenge, and approve cloud platform architectures and designs, ensuring alignment with enterprise security, regulatory, and technology standards
• Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines
• Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines and escalated where required
• Maintain compliance with internal policies, regulatory requirements, audit controls, and industry frameworks, ensuring audit readiness and timely remediation of control gaps
• Identify, assess, prioritize, mitigate, and report security risks, exceptions, and technical debt, ensuring risks are managed within approved risk tolerances

Technologies:

• AWS
• Azure
• CI/CD
• Cloud
• Support
• Security

More:

We are AXA, a global leader in insurance and financial services, dedicated to helping customers protect what matters most. As the sixth-largest insurance company in the world, we provide a wide range of services including health, car, home, and business insurance, supporting millions of customers worldwide. Our AXA UK Support Functions team supports our three customer-facing business units by providing the infrastructure and expertise needed to serve our customers. This is a new opportunity for a Cloud Platform Security Lead to join us in a specialist role. We work smart and support flexible working, with at least two days a week away from home now and three days a week in the future, and we are happy to discuss flexible arrangements. We are proud to be an Equal Opportunities Employer and offer support through our Accessibility Concierge for candidates who need adjustments during the application or interview process.

last updated 36 week of 2026