Cloud Security Manager

ASOS; London; On-site; GBP 70,000 - 95,000; Full time

Job summary

A leading company in the fashion industry, ASOS, is seeking an experienced Cloud Security Manager. In this pivotal role, you will oversee a dedicated team, implement security strategies, and ensure compliance across cloud platforms. If you're passionate about safeguarding digital assets and enhancing company security, join ASOS to thrive in a dynamic environment that values innovation and personal growth.

Benefits

Personal development opportunities

Employee sample sales

Access to LinkedIn learning materials

25 days paid annual leave + celebration day

Discretionary bonus scheme

Private medical care scheme

Flexible benefits allowance

Qualifications

• Experience in cloud security solutions and technologies.
• Extensive knowledge of security frameworks like ISO 27001.
• Application security/DevSecOps knowledge.

Responsibilities

• Lead a team of cloud security practitioners, fostering their growth.
• Implement security strategies aligning with business goals.
• Conduct risk assessments and security audits.

Skills

Cloud security expertise

Stakeholder management

Communication capabilities

Tools

Azure Kubernetes Service

AWS

Google Cloud Platform

Microsoft Sentinel

Microsoft Defender

Microsoft Purview

Job description

Social network you want to login/join with:

As an experienced Cloud Security Manager, you will play a pivotal role in ensuring the security and integrity of our cloud-based infrastructure and services. You will supervise a small team of cloud security practitioners, ensuring the efficient and effective use of security technologies to protect our assets, mitigate risks, and preserve the confidentiality, integrity, and availability of our information systems.

This role involves a blend of technical expertise, stakeholder management skills, and communication capabilities to ensure the company's security posture is robust, efficient, and compliant with industry standards and regulations.

We’re passionate about protecting our colleagues and the ASOS brand, so we would love someone who can thrive and develop in an ever-growing and changing security landscape.

Responsibilities:

• Lead a small team of cloud security practitioners, providing guidance, support, and mentorship to foster professional growth.
• Contribute to and implement an overarching cloud security strategy aligned with business objectives, industry best practices, and regulatory requirements.
• Implement and maintain security controls and configurations for cloud-based environments, including but not limited to AWS, Azure, and Google Cloud Platform.
• Conduct risk assessments and security audits to identify vulnerabilities, threats, and compliance gaps within our cloud infrastructure.
• Develop a suite of metrics that allow the organisation to track vulnerabilities across multiple platforms and applications, while also tracking remediation progress and providing insight into key trends.
• Develop and enforce cloud security policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.
• Collaborate with cross-functional teams, including IT, DevOps, and development teams, to integrate security into the entire SDLC, cloud development lifecycle, and cloud projects when needed.

Qualifications/Experience/Skills:

• Proven experience in cloud security expertise.
• Azure Kubernetes Service (AKS) experience, alongside Kubernetes, Docker, policy as code, and securing containers expertise.
• In-depth knowledge of security frameworks, standards, and best practices (ISO 27001, NIST Cloud Security Framework, CIS hardening, and the CSA CCM).
• Proven knowledge of “service wrappers” as they pertain to best practice around product/platform lifecycles.
• Experience working with Microsoft cloud security technologies, especially Sentinel, Defender, and Purview.
• Experience working with other cloud security technologies and environments (AWS & GCP).
• Application security/DevSecOps knowledge is preferable, especially when applied to a Secure Software Development Life Cycle (SSDLC) framework.

Additional Information:

• ASOS Develops (personal development opportunities across the business).
• Employee sample sales.
• Access to a huge range of LinkedIn learning materials.
• 25 days paid annual leave + an extra celebration day for a special moment.
• Discretionary bonus scheme.
• Private medical care scheme.
• Flexible benefits allowance — which you can choose to take as extra cash or use towards other benefits.