Cloud Security Governance & Policy Lead

Tekskills; Bulandshahr; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Tekskills is seeking a Cloud Security Governance & Policy Lead to drive organization-wide cloud security governance across multi-location offices in India. The role emphasizes design and enforcement of policy controls, Zero Trust, and best practices for secure DevOps integration.

The candidate will collaborate with DevOps and cybersecurity teams to remediate non-compliant resources, mentor teams, and continuously improve cloud posture using CNAPP tools and IaC workflows.

Qualifications

• 10–15 years of relevant cloud security experience.
• Strong knowledge of policy-as-code and cloud governance.
• Experience with Azure, AWS, and security controls.

Responsibilities

• Design, implement, and manage org-wide controls using Azure Policies, AWS Organizations, SCPs, Config Rules, and Cloud Custodian.
• Engineer Zero Trust and least privilege models (RBAC, PBAC), region restrictions, and security controls across Cloud Platforms.
• Collaborate with DevOps and Cybersecurity teams to remediate non-compliant resources.
• Monitor policy effectiveness and continuously improve cloud governance posture.
• Provide technical leadership and mentorship on cloud policy best practices.
• Collaborate with risk, compliance, and audit teams to produce evidence of cloud control effectiveness.
• Implement and manage CNAPP policies using Wiz for continuous cloud posture assessment and remediation.
• Embed security early in the SDLC by integrating vulnerability scanning, IaC policy enforcement, and compliance checks into CI/CD pipelines (GitLab Runners).
• Develop policy-as-code frameworks using OPA/Rego to prevent misconfigurations before deployment.
• Integrate security controls into Infrastructure-as-Code (IaC) workflows using tools like Terraform.
• Champion shift-left practices, enabling developers to self-remediate security and compliance findings during coding and build stages.
• Create SOAR playbooks to automate incident response and remediation

Skills

Cloud DevOps

Job description

Job Title: Cloud Security Governance & Policy Lead
Work Location: Chennai, TN/ Hyderabad, TS/ Bangalore, KA

Skills Required: Cloud DevOps
Experience: 10 - 15 Years

Job Description

• Design, implement, and manage organization-wide controls using Azure Policies, AWS Organizations, SCPs, Config Rules, and Cloud Custodian.
• Engineer Zero Trust and least privilege models (RBAC, PBAC), region restrictions, and security controls across Cloud Platforms.
• Collaborate with DevOps and Cybersecurity teams to remediate non-compliant resources.
• Monitor policy effectiveness and continuously improve cloud governance posture.
• Provide technical leadership and mentorship on cloud policy best practices.
• Collaborate with risk, compliance, and audit teams to produce evidence of cloud control effectiveness.
• Implement and manage CNAPP policies using Wiz for continuous cloud posture assessment and remediation.
• Embed security early in the SDLC by integrating vulnerability scanning, IaC policy enforcement, and compliance checks into CI/CD pipelines (GitLab Runners).
• Develop policy-as-code frameworks using OPA/Rego to prevent misconfigurations before deployment.
• Integrate security controls into Infrastructure-as-Code (IaC) workflows using tools like Terraform.
• Champion shift-left practices, enabling developers to self-remediate security and compliance findings during coding and build stages.

Create SOAR playbooks to automate incident response and remediation