Cloud Security Consultant - Information Compliance Security : CNAPP, CSPM & Multi-Cloud Exp -8 - 12 Yrs | Job Location : Gurgaon, Mumbai

WNS; Gurugram District; On-site; INR 2,600,000 - 5,200,000; Full time

Job summary

WNS, part of Capgemini, is seeking a senior Cloud Security Architect to lead end-to-end security reviews for multi-cloud environments (Azure, AWS, GCP) and define secure-by-design patterns. You will drive CSPM, CIEM, and incident readiness across enterprise IT and DevOps teams.

You will review IaC templates, enforce CIS benchmarks, guide risk and leadership with practical recommendations, and mentor security engineers in a fast-paced, global delivery setting.

Qualifications

• 8–12+ years in Information Security with 5–7 years in cloud security architecture/engineering.
• Hands-on with Azure, AWS, GCP security services.
• Experience with security assessments, pen testing or vulnerability management in cloud.
• Proven ability to design/review secure cloud architectures for enterprise solutions.

Responsibilities

• Conduct end-to-end cloud design reviews (M365, Azure, AWS, SaaS, PaaS, IaaS) for security by design.
• Lead CSPM reviews, CIEM, workload and container security.
• Review IaC templates and automation scripts for security flaws.
• Drive cloud security governance, remediation and incident readiness across teams.

Skills

Cloud security architecture

Azure/AWS/GCP

CNAPP/CSPM/CIEM

IAM & data protection

DevSecOps

IaC security

Terraform/CloudFormation/Bicep

Kubernetes/Docker security

VPC/VNet security

Security governance & compliance

Tools

Prisma Cloud

Wiz

Tenable

Lacework

Microsoft Cloud Security tools

Cloud KMS / Key Vault

Job description

Company Description

WNS, part of Capgemini, is an Agentic AI-powered leader in intelligent operations and transformation, serving more than 700 clients across 10 industries, including Banking and Financial Services, Healthcare, Insurance, Shipping and Logistics, and Travel and Hospitality. We bring together deep domain excellence – WNS’ core differentiator – with AI-powered platforms and analytics to help businesses innovate, scale, adapt and build resilience in a world defined by disruption. Our purpose is clear: to enable lasting business value by designing intelligent, human-led solutions that deliver sustainable outcomes and a differentiated impact. With three global headquarters across four continents, operations in 13 countries, 65 delivery centers and more than 66,000 employees, WNS combines scale, expertise and execution to create meaningful, measurable impact.

Job Description

Key Responsibilities

End-to-End Cloud Security Solution Review & Design Assurance

• Conduct comprehensive design and architecture reviews of end-to-end cloud technology solutions, including cloud platforms (M365, Azure, AWS) and SaaS, PaaS, and IaaS implementations, ensuring security by design.
• Perform in-depth technical assessments of implemented technology solutions (on-premises and cloud) to identify misconfigurations, deviations from best practices, and potential attack vectors.
• Evaluate cloud security solutions against threat models, risk assessments, and industry-recognized frameworks (e.g., NIST CSF, CSA CCM, ISO 27001, CIS Benchmarks).
• Provide expert security recommendations and architectural guidance to Risk, InfoSec, and Enterprise IT leadership, as well as to client-facing processes.

Cloud Security Posture Management & Compliance Assurance

• Lead and execute Cloud Security Posture Management (CSPM) reviews using CNAPP (Cloud-Native Application Protection Platform) tools to assess cloud security posture, cloud identity protection (CIEM), workload protection, and container security.
• Run regular compliance scans of cloud resources against standards such as HIPAA, GDPR, PCI DSS, and SOC 2, and drive continuous improvement of compliance posture.
• Review and provide feedback on cloud security policies, procedures, and hardening documents, ensuring alignment with CIS benchmarks and organizational InfoSec policies.
• Conduct cloud risk assessments to identify threats, vulnerabilities, and misconfigurations that could impact IT operations and sensitive data.

Secure Cloud Development & Operations Practices

• Collaborate with Enterprise IT and DevOps teams to embed security throughout the SDLC and CI/CD pipelines.
• Review Infrastructure as Code (IaC) templates and automation scripts for security flaws, guiding teams on secure IaC best practices.
• Participate in cloud attack path analysis to understand adversary techniques and design preventative and detective controls.
• Ensure CIS and other security best practices are rigorously applied across new and existing applications, products, and cloud infrastructure.

Security Governance & Remediation Oversight

• Partner with cross-functional teams to track and drive remediation of identified security vulnerabilities and misconfigurations.
• Contribute to the continuous improvement of cloud security governance frameworks and processes.
• Act as a subject matter expert for incident response and forensic readiness related to cloud security incidents.
• Collaborate on cloud attack path analysis across teams.

Qualifications

Experience

• 8–12+ years of progressive experience in Information Security, with at least 5–7 years focused specifically on cloud security architecture, engineering, and review.
• Extensive hands-on experience with security services and features across major cloud providers (Azure, AWS, GCP).
• Demonstrable experience performing security assessments, penetration testing, or vulnerability management within cloud environments.
• Proven experience designing and reviewing secure cloud architectures for complex enterprise solutions.

Technical Expertise

• Strong understanding of cloud computing principles (IaaS, PaaS, SaaS) and the Shared Responsibility Model.
• Expertise in cloud security frameworks and standards: NIST CSF, CSA CCM, ISO 27001, CIS Benchmarks, OWASP Cloud Top 10.
• Hands-on proficiency with leading CNAPP platforms (e.g., Prisma Cloud, Wiz, Tenable, Lacework, Microsoft, CrowdStrike Cloud Security) for CSPM, CIEM, cloud workload protection, and container security.
• Strong grasp of Identity and Access Management (IAM) in the cloud: Azure AD, AWS IAM, GCP IAM, conditional access policies, MFA, SSO, PIM/PAM.
• Advanced knowledge of network security in the cloud: VPC/VNet design, network segmentation, firewalls (WAF, NGFW), security groups/NSGs, VPNs, and private links.
• Expertise in data security and encryption, including securing data at rest and in transit using native cloud encryption services (KMS, Key Vault, Cloud KMS).
• Understanding of application security in the cloud, including secure coding practices, API security, serverless function security, and DevSecOps integration.
• Ability to review and secure Infrastructure as Code (Terraform, CloudFormation, ARM templates, Bicep) and policy-as-code implementations.
• Knowledge of containerization (Docker, Kubernetes) and associated security best practices and tools.

Compliance & Governance

• In-depth knowledge of regulatory compliance requirements (GDPR, HIPAA, PCI DSS, SOC 2, ISO 27001) and their application in cloud environments.
• Experience with GRC (Governance, Risk, and Compliance) tools and processes for cloud.

Analytical & Communication Skills

• Exceptional analytical and problem-solving skills with meticulous attention to detail.
• Strong ability to articulate complex security concepts and risks to technical and non-technical audiences alike.
• Excellent written and verbal communication skills for documentation, reports, and presentations.
• Ability to work independently and collaboratively within a distributed team, managing multiple priorities effectively.

Certifications (Highly Preferred)

Cloud Security Certifications:

• (ISC)² Certified Cloud Security Professional (CCSP)
• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Google Professional Cloud Security Engineer
• Certificate of Cloud Security Knowledge (CCSK)

General Security Certifications:

• (ISC)² CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)