Cloud Security Manager

TN United Kingdom; London; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a skilled Cloud Security Manager to enhance their cloud infrastructure's security. This role is crucial for leading a dedicated team, implementing robust security strategies, and ensuring compliance with industry standards. You will engage in risk assessments, develop security policies, and collaborate across departments to integrate security into the development lifecycle. If you are passionate about cloud security and thrive in a dynamic environment, this position offers an exciting opportunity to make a significant impact within a growing organization committed to excellence.

Benefits

Personal Development Opportunities

Employee Sample Sales

Access to LinkedIn Learning Materials

25 Days Paid Annual Leave

Discretionary Bonus Scheme

Private Medical Care Scheme

Flexible Benefits Allowance

Qualifications

• Proven experience in cloud security expertise with a focus on compliance.
• In-depth knowledge of security frameworks and best practices like ISO 27001.

Responsibilities

• Lead a team of cloud security practitioners and implement security strategies.
• Conduct risk assessments and audits to identify vulnerabilities in cloud infrastructure.

Skills

Cloud Security Expertise

Stakeholder Management

Communication Skills

Risk Assessment

Security Audits

Policy as Code

Application Security

DevSecOps Knowledge

Education

Experience in Cloud Security

Knowledge of Security Frameworks

Tools

Azure Kubernetes Service (AKS)

AWS

Google Cloud Platform (GCP)

Microsoft Sentinel

Microsoft Defender

Microsoft Purview

Docker

Job description

As an experienced Cloud Security Manager, you will play a pivotal role in ensuring the security and integrity of our cloud-based infrastructure and services. You will supervise a small team of cloud security practitioners, ensuring the efficient and effective use of security technologies to protect our assets, mitigate risks, and preserve the confidentiality, integrity, and availability of our information systems.

This role involves a blend of technical expertise, stakeholder management skills, and communication capabilities to ensure the company's security posture is robust, efficient, and compliant with industry standards and regulations.

We’re quite passionate about protecting our colleagues and the ASOS brand, so we would love someone who can thrive and develop on an ever-growing and changing security landscape.

Responsibilities:

• Lead a small team of cloud security practitioners, providing guidance, support, and mentorship to foster professional growth.
• Contribute to and implement an overarching cloud security strategy aligned with business objectives, industry best practices, and regulatory requirements.
• Implement and maintain security controls and configurations for cloud-based environments, including but not limited to AWS, Azure, and Google Cloud Platform.
• Conduct risk assessments and security audits to identify vulnerabilities, threats, and compliance gaps within our cloud infrastructure.
• Develop a suite of metrics that allow the organization to track vulnerabilities across multiple platforms and applications, while also tracking remediation progress and providing insight into key trends.
• Develop and enforce cloud security policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.
• Collaborate with cross-functional teams, including IT, DevOps, and development teams, to integrate security into the entire SDLC, cloud development lifecycle, and cloud projects when needed.

Qualifications

• Proven experience in cloud security expertise.
• Azure Kubernetes Service (AKS) experience, alongside Kubernetes, Docker, policy as code, and securing containers expertise.
• In-depth knowledge of security frameworks, standards, and best practices (ISO 27001, NIST Cloud Security Framework, CIS hardening, and the CSA CCM).
• Proven knowledge of “service wrappers” as they pertain to best practice around product/platform lifecycles.
• Experience working with Microsoft cloud security technologies, especially Sentinel, Defender, and Purview.
• Experience working with other cloud security technologies and environments (AWS & GCP).
• Application security/DevSecOps knowledge is preferable, especially when applied to a Secure Software Development Life Cycle (SSDLC) framework.

Additional Information

• ASOS Develops (personal development opportunities across the business).
• Employee sample sales.
• Access to a huge range of LinkedIn learning materials.
• 25 days paid annual leave + an extra celebration day for a special moment.
• Discretionary bonus scheme.
• Private medical care scheme.
• Flexible benefits allowance - which you can choose to take as extra cash, or use towards other benefits.