Cloud Security Governance & Policy Lead

Tekskills; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Tekskills is seeking a Cloud Security Governance Lead to design and implement organization-wide controls, including Azure Policies, AWS SCPs, and Config Rules. You will build and maintain policy-as-code and CNAPP coverage using Wiz, with a focus on Zero Trust, RBAC/PBAC, and secure SDLC integration.

Join a team collaborating with DevOps, cybersecurity, risk, and audit to prove control effectiveness and continuous posture improvement across cloud platforms.

Qualifications

• Design, implement, and manage org-wide controls using Azure Policies, AWS Organizations, SCPs, Config Rules, and Cloud Custodian.
• Engineer Zero Trust and least privilege models (RBAC, PBAC), region restrictions, and security controls across Cloud Platforms.
• Collaborate with DevOps and Cybersecurity teams to remediate non-compliant resources.
• Monitor policy effectiveness and continuously improve cloud governance posture.
• Provide technical leadership and mentorship on cloud policy best practices.
• Collaborate with risk, compliance, and audit teams to produce evidence of cloud control effectiveness.
• Implement CNAPP policies using Wiz for continuous cloud posture assessment and remediation.
• Embed security early in the SDLC by integrating vulnerability scanning, IaC policy enforcement, and compliance checks into CI/CD pipelines (GitLab Runners).
• Develop policy-as-code frameworks using OPA/Rego to prevent misconfigurations before deployment.
• Integrate security controls into Infrastructure-as-Code (IaC) workflows using tools like Terraform.
• Champion shift-left practices, enabling developers to self-remediate security and compliance findings during coding and build stages.
• Create SOAR playbooks to automate incident response and remediation

Responsibilities

• Design and implement governance controls across Azure, AWS, and Cloud platforms.
• Lead secure-by-default policy design and enforcement through IaC.
• Mentor teams on cloud security practices and policy automation.
• Collaborate with risk/compliance to demonstrate control effectiveness.
• Develop policy-as-code and CNAPP policy implementations for continuous posture assessment.
• Automate incident response and remediation with SOAR playbooks.

Skills

Cloud DevOps

Tools

Terraform

GitLab

Wiz

OPA/Rego

Cloud Custodian

Job description

Job Title: Cloud Security Governance & Policy Lead
Work Location: Chennai, TN/ Hyderabad, TS/ Bangalore, KA

Skills Required: Cloud DevOps
Experience: 10 - 15 Years

Job Description

• Design, implement, and manage organization-wide controls using Azure Policies, AWS Organizations, SCPs, Config Rules, and Cloud Custodian.
• Engineer Zero Trust and least privilege models (RBAC, PBAC), region restrictions, and security controls across Cloud Platforms.
• Collaborate with DevOps and Cybersecurity teams to remediate non-compliant resources.
• Monitor policy effectiveness and continuously improve cloud governance posture.
• Provide technical leadership and mentorship on cloud policy best practices.
• Collaborate with risk, compliance, and audit teams to produce evidence of cloud control effectiveness.
• Implement and manage CNAPP policies using Wiz for continuous cloud posture assessment and remediation.
• Embed security early in the SDLC by integrating vulnerability scanning, IaC policy enforcement, and compliance checks into CI/CD pipelines (GitLab Runners).
• Develop policy-as-code frameworks using OPA/Rego to prevent misconfigurations before deployment.
• Integrate security controls into Infrastructure-as-Code (IaC) workflows using tools like Terraform.
• Champion shift-left practices, enabling developers to self-remediate security and compliance findings during coding and build stages.

Create SOAR playbooks to automate incident response and remediation