Senior Cloud Platform Security Lead – Hybrid/Remote

AXA Group; Tunbridge Wells; Hybrid; GBP 68,000 - 108,000; Full time

Job summary

AXA Group is seeking a Cloud Platform Security Lead to guide platform security across AWS and Azure environments. The role emphasizes cloud security architecture, governance reporting to senior stakeholders, and leadership of security programs within a complex, regulated enterprise.

The candidate will drive security-by-design principles, IaC integration, and continuous improvement of security controls, working closely with cyber security operations and enterprise governance teams.

Qualifications

• Cloud security architecture and engineering expertise.
• Experience securing large-scale cloud platforms, with Azure preferred.
• Ability to present security risk and governance reports to leadership audiences.
• Experience designing and implementing cloud security controls and guardrails.
• Evidence of prior coaching, mentoring, and team leadership.
• Competence in implementing security standards aligned to ISO27001, NIST, CIS, or SOC2.
• Good understanding of policy-as-code and infrastructure-as-code practices.
• Proficiency in operating within regulated or enterprise-scale environments.

Responsibilities

• Provide technical security guidance to drive our platform security to the highest standard.
• Drive the adoption and implementation of cloud security solutions and practices.
• Work closely with our Cyber Security operational teams.
• Define, produce, and present security posture metrics, risk reports, compliance status, and governance dashboards for AWS and Azure platforms to senior leadership and stakeholders.
• Implement and continuously improve preventative, detective, and corrective security controls, guardrails, and policy enforcement across cloud platform services.
• Review, challenge, and approve cloud platform architectures and designs, ensuring alignment with enterprise security, regulatory, and technology standards.
• Drive security-by-design principles and integrate security controls into cloud services, IaC, automation frameworks, and CI/CD pipelines.
• Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines and escalated where required.
• Maintain compliance with internal policies, regulatory requirements, audit controls, and industry frameworks, ensuring audit readiness and timely remediation of control gaps.
• Identify, assess, prioritize, mitigate, and report security risks, exceptions, and technical debt, ensuring risks are managed within approved risk tolerances.

Skills

Cloud security architecture

Cloud security engineering

Azure security

Security risk reporting

Policy as code

Infrastructure as code

Team leadership

Security standards ISO27001/NIST/CIS/S

Regulated environments

Governance dashboards

Tools

CI/CD tooling

Cloud platforms

Job description

AXA Group is seeking a Cloud Platform Security Lead to guide platform security across AWS and Azure environments. The role emphasizes cloud security architecture, governance reporting to senior stakeholders, and leadership of security programs within a complex, regulated enterprise.

The candidate will drive security-by-design principles, IaC integration, and continuous improvement of security controls, working closely with cyber security operations and enterprise governance teams.