Senior Cloud Security Lead (Azure & AWS)

AXA UK; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

AXA UK is seeking a Cloud Platform Security Lead to provide technical security guidance and drive platform security across cloud services, especially AWS and Azure, collaborating with our Cyber Security teams.

You will define, produce, and present security posture metrics, risk reports and governance dashboards, own vulnerability management and remediation, and ensure audit readiness and regulatory compliance across the cloud platform.

Qualifications

• Expertise in cloud security architecture and engineering.
• Experience securing large-scale cloud platforms, Azure preferred.
• Ability to present security risk and governance reports to leadership.
• Experience designing and implementing cloud security controls.
• Evidence of coaching, mentoring and team leadership.
• Knowledge of standards such as ISO27001, NIST, CIS or SOC2.
• Strong understanding of policy-as-code and IaC practices.
• Experience operating in regulated or enterprise-scale environments.

Responsibilities

• Define, produce, and present security posture metrics, risk reports, compliance status, and governance dashboards for AWS and Azure platforms to senior leadership and stakeholders.
• Implement, and continuously improve preventative, detective, and corrective security controls, guardrails, and policy enforcement across cloud platform services.
• Review, challenge, and approve cloud platform architectures and designs, ensuring alignment with enterprise security, regulatory, and technology standards.
• Drive security-by-design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines.
• Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines and escalated where required.
• Maintain compliance with internal policies, regulatory requirements, audit controls, and industry frameworks, ensuring audit readiness and timely remediation of control gaps.
• Identify, assess, prioritize, mitigate, and report security risks, exceptions, and technical debt, ensuring risks are managed within approved risk tolerances.

Skills

Cloud security architecture

Large-scale cloud platforms

Security risk reporting

Security controls design

Coaching & leadership

Security standards ISO27001/NIST/SOC2

Policy-as-code / IaC

Regulated environments

Job description

AXA UK is seeking a Cloud Platform Security Lead to provide technical security guidance and drive platform security across cloud services, especially AWS and Azure, collaborating with our Cyber Security teams.

You will define, produce, and present security posture metrics, risk reports and governance dashboards, own vulnerability management and remediation, and ensure audit readiness and regulatory compliance across the cloud platform.