Information Security Officer (Cloud Security)

Consult; Greater London; Hybrid; GBP 81,000 - 99,000; Part time

Job summary

Deloitte is hiring an Information Security Officer for cloud security governance and risk management across large-scale platforms. The role requires senior security leadership to drive secure-by-design principles and enterprise compliance.

The candidate will lead security activities, automate controls, review vulnerabilities, and collaborate with engineering teams to deliver secure cloud architectures in a hybrid London/Belfast environment.

Qualifications

• 6+ years IT experience with 4+ years in cyber/information security
• 2+ years securing AWS and/or GCP environments
• Experience with risk assessments and governance
• Strong knowledge of AWS Well-Architected Framework and GCPSC
• Familiarity with NIST, ISO27001, CSA STAR

Responsibilities

• Lead security activities across technology and infrastructure functions.
• Identify opportunities to automate security controls.
• Identify, investigate and remediate security vulnerabilities.
• Analyze source code to identify weaknesses.
• Review security testing results and prioritize remediation.
• Perform manual and automated security testing as needed.
• Conduct security risk assessments.
• Collaborate with engineering and business teams to deliver secure solutions.
• Contribute to enterprise security architecture across major programmes.
• Ensure cloud architectures align with security policies.
• Define compensating controls where required.
• Translate business requirements into secure technical solutions.
• Recommend secure infrastructure platforms and cloud architectures.
• Influence security strategy and architectural decisions.
• Provide technical leadership across cloud security initiatives.

Skills

Cloud security

AWS security

GCP security

Terraform

CI/CD

Python

Threat modelling

IAM security

Security governance

Risk assessments

Security architecture

Education

Bachelor's degree in CS/Cyber Security

CISSP/CISM/CCSP

AWS/GCP certs

Tools

Terraform

CloudFormation

Python

Job description

Contract Role: Information Security Officer (Cloud Security)

Contract Location: London/Belfast (Hybrid)

Contract Duration: 6 months initially (with potential extension)

Contract Start Date: Immediate

Contract Classification: Inside IR35

Daily Rate breakdown

Traditional Daily Rate: £450

Agreed Contract Rate (ACR): £346.95

Equivalent Annual Salary: £90,206 + £10,887 holiday pay

Payroll provider: Rockford Payroll Info for Contingent Workers - Rockford Pay

Overview

Deloitte is supporting a Tier 1 Global Bank in hiring experienced Information Security Officers to lead cloud security governance, security architecture and cyber risk management across large-scale technology platforms. This is a senior security role responsible for driving secure-by-design principles, identifying cyber risks and ensuring compliance with enterprise security policies.

Key Responsibilities

• Lead Information Security activities across supported technology and infrastructure functions.
• Identify opportunities to automate and standardise security controls.
• Identify, investigate and remediate security vulnerabilities across infrastructure and applications.
• Analyse source code to identify and mitigate security weaknesses.
• Review automated security testing results and prioritise remediation based on risk.
• Perform manual and automated security testing where required.
• Conduct Information Security risk assessments.
• Analyse root causes of vulnerabilities and recommend corrective actions.
• Work with engineering and business teams to deliver secure technical solutions.
• Contribute to enterprise security architecture across major technology programmes.
• Ensure cloud architectures align with corporate security policies and industry best practices.
• Assess security risks and define compensating controls where required.
• Translate business requirements into secure technical solutions.
• Recommend secure infrastructure platforms and cloud architectures.
• Influence security strategy and architectural decisions.
• Provide technical leadership across complex cloud security initiatives.

Essential Skills & Experience

• Minimum 6 years' IT experience, including at least 4 years in Cyber Security/Information Security across cloud and on-premises environments.
• Minimum 2 years securing AWS and/or GCP cloud environments.
• Experience conducting Information Security Risk Assessments and Security Governance.
• Strong understanding of AWS Well-Architected Framework and Google Cloud Security Command Center.
• Strong knowledge of AWS and GCP IAM security models.
• In-depth knowledge of cloud infrastructure including VPC, EC2, S3, Cloud Storage and Compute Engine.
• Familiarity with NIST, ISO 27001 and CSA STAR compliance frameworks.
• Experience engaging with Information Security, Risk, Control & Compliance, Architecture and Project teams.
• Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS.
• Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security and network segmentation.
• Ability to design and review secure technical architectures.
• Experience reviewing Infrastructure as Code using Terraform and/or CloudFormation.
• Strong understanding of SDLC and CI/CD pipelines.
• Hands-on Python scripting experience.

Qualifications:

• Associate or Professional AWS or GCP Cloud Certification (mandatory).
• Associate or Professional Cyber Security Certification (mandatory).
• Excellent communication and influencing skills.
• Strong stakeholder and relationship management.
• Excellent analytical and problem-solving capability.
• Self-motivated with the ability to lead complex security initiatives.
• Strong technical documentation and presentation skills.
• Bachelor's degree in Computer Science, Cyber Security or related discipline (or equivalent experience).
• CISSP, CISM or CCSP highly desirable.
• AWS Solutions Architect or Google Professional Cloud Security Engineer certifications are advantageous.