Cloud Security Governance & Policy Lead

Tekskills; Hyderabad; On-site; INR 1,900,000 - 2,800,000; Full time

Job summary

Tekskills is seeking a Cloud Security Governance & Policy Lead to drive organization-wide security policy and cloud controls across multiple cloud platforms in India. You will shape governance strategy and lead the implementation of policy-based controls to protect assets and data.

Collaborating with DevOps, Cybersecurity, risk and audit teams, you will develop policy-as-code using OPA/Rego and IaC tooling, implement CNAPP policies, and embed security into CI/CD pipelines to enable secure

Qualifications

• 10–15 years of experience in cloud security governance and policy.
• Strong expertise in Azure Policies, AWS Organizations, SCPs, and Config Rules.
• Experience implementing CNAPP policies and privacy/compliance controls.
• Ability to design policy-as-code and IaC security integrations.

Responsibilities

• Design, implement, and manage organization-wide controls using Azure Policies, AWS Organizations, SCPs, Config Rules, and Cloud Custodian.
• Engineer Zero Trust and least privilege models (RBAC, PBAC), region restrictions, and security controls across Cloud Platforms.
• Collaborate with DevOps and Cybersecurity teams to remediate non-compliant resources.
• Monitor policy effectiveness and continuously improve cloud governance posture.
• Provide technical leadership and mentorship on cloud policy best practices.
• Collaborate with risk, compliance, and audit teams to produce evidence of cloud control effectiveness.
• Implement and manage CNAPP policies using Wiz for continuous cloud posture assessment and remediation.
• Embed security early in the SDLC by integrating vulnerability scanning, IaC policy enforcement, and compliance checks into CI/CD pipelines (GitLab Runners).
• Develop policy-as-code frameworks using OPA/Rego to prevent misconfigurations before deployment.
• Integrate security controls into Infrastructure-as-Code (IaC) workflows using tools like Terraform.
• Champion shift-left practices, enabling developers to self-remediate security and compliance findings during coding and build stages.
• Create SOAR playbooks to automate incident response and remediation

Skills

Cloud DevOps

Job description

Job Title: Cloud Security Governance & Policy Lead
Work Location: Chennai, TN/ Hyderabad, TS/ Bangalore, KA

Skills Required: Cloud DevOps
Experience: 10 - 15 Years

Job Description

• Design, implement, and manage organization-wide controls using Azure Policies, AWS Organizations, SCPs, Config Rules, and Cloud Custodian.
• Engineer Zero Trust and least privilege models (RBAC, PBAC), region restrictions, and security controls across Cloud Platforms.
• Collaborate with DevOps and Cybersecurity teams to remediate non-compliant resources.
• Monitor policy effectiveness and continuously improve cloud governance posture.
• Provide technical leadership and mentorship on cloud policy best practices.
• Collaborate with risk, compliance, and audit teams to produce evidence of cloud control effectiveness.
• Implement and manage CNAPP policies using Wiz for continuous cloud posture assessment and remediation.
• Embed security early in the SDLC by integrating vulnerability scanning, IaC policy enforcement, and compliance checks into CI/CD pipelines (GitLab Runners).
• Develop policy-as-code frameworks using OPA/Rego to prevent misconfigurations before deployment.
• Integrate security controls into Infrastructure-as-Code (IaC) workflows using tools like Terraform.
• Champion shift-left practices, enabling developers to self-remediate security and compliance findings during coding and build stages.

Create SOAR playbooks to automate incident response and remediation