Info Security Consultant II

Jobtailor; Mumbai; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Jobtailor in Mumbai seeks a senior Cloud Security Governance specialist to lead CGA and SPI activities, document security processes, and drive automation initiatives. You will perform risk reviews of cloud environments and validate evidence for CGA approval decisions, plus QA Azure and AWS CGA cases.

You will maintain AWS/Azure cloud control libraries, track security metrics, and provide risk-based advisory services across onboarding, architecture, and operations, ensuring alignment with

Qualifications

• B.E/B.Tech or equivalent engineering degree.
• 6+ years of experience in cloud security or risk consulting.
• Cloud automation using Python.
• Proficient in AWS and Azure; willingness to develop GCP expertise.
• Experience with security risk assessments and governance reviews.
• Familiarity with NIST, CIS, ISO frameworks and cloud-native controls.
• Strong analytical skills for micro-level risk decisions.
• Experience with Jira/Kanban and Excel reporting.
• Certifications in AWS/Azure/GCP/CISSP/CCSP are a plus.
• Work timings IST 11:30AM-8:30PM.

Responsibilities

• Support CGA and SPI activities.
• Document and maintain cloud security processes, procedures, guidebooks, and playbooks.
• Identify opportunities to automate manual processes.
• Perform risk reviews of cloud environments and validate evidence for CGA approval decisions.
• Conduct QA reviews for Azure and AWS CGA cases.
• Manage high-volume governance operations, including 2,000+ Azure and AWS policy evaluations monthly.
• Maintain and enhance AWS and Azure cloud control libraries.
• Execute and support SPI processes, including tracking, measuring, and reporting security metrics and governance outcomes.
• Provide risk-based security consulting, review, and advisory services across cloud onboarding, architecture, and operations.
• Partner with cloud and risk teams to ensure security controls are implemented, assessed, and aligned with enterprise policies and regulatory requirements.

Skills

Cloud Security Governance

Risk Assessment

Python Programming

AWS & Azure Expertise

Security Frameworks (NIST CIS ISO)

Education

B.E./B.Tech

Tools

AWS Security Hub

Azure Defender

GCP SCC

Jira/Kanban

Excel Reporting

Job description

• Support Cloud Governance & Approval (CGA) and Security Process Integration (SPI) activities
• Document and maintain cloud security processes, procedures, guidebooks, and playbooks
• Identify opportunities to automate manual processes
• Perform risk reviews of cloud environments and validate evidence for CGA approval decisions
• Conduct QA reviews for Azure and AWS CGA cases
• Manage high-volume governance operations, including 2,000+ Azure and AWS policy evaluations monthly
• Maintain and enhance AWS and Azure cloud control libraries
• Execute and support SPI processes, including tracking, measuring, and reporting security metrics and governance outcomes
• Provide risk-based security consulting, review, and advisory services across cloud onboarding, architecture, and operations
• Partner with cloud and risk teams to ensure security controls are implemented, assessed, and aligned with enterprise policies and regulatory requirements

Requirements

• B.E/B.Tech
• 6+ years of experience
• Cloud automation using Python
• Working knowledge of AWS and Azure, with exposure or willingness to develop expertise in GCP
• Experience in information security, cloud security, or risk consulting
• Experience performing security risk assessments, control validation, and governance reviews
• Familiarity with cloud security frameworks (NIST, CIS, ISO) and cloud-native controls and architectures
• Strong analytical skills with ability to collect and evaluate data at a micro-level for risk decisions
• Experience with Jira/Kanban workflows and Excel-based reporting and data tracking
• Python programming and tools
• Experience supporting CGA, governance, or security approval workflows
• Exposure to cloud security tools (e.g., AWS Security Hub, Azure Defender, GCP SCC)
• Relevant certifications (e.g., AWS, Azure, GCP, CISSP, CCSP)
• Work timings: 11:30AM - 8:30PM (IST)

Core Competencies

Demonstrates expertise in cloud security governance, risk assessment, and automation, with a strong focus on AWS and Azure environments. Proficient in Python programming for cloud automation and experienced in implementing security frameworks and controls.

Highest-signal resume keywords

• Cloud Security Governance
• Risk Assessment
• Python Programming
• AWS and Azure Expertise
• Security Frameworks (NIST, CIS, ISO)

Hard Skills

• Cloud Automation
• Security Risk Assessments
• Control Validation
• Governance Reviews
• Data Evaluation
• Cloud Security Tools
• Policy Evaluations
• Security Metrics Reporting
• Cloud Control Libraries
• Jira/Kanban Workflows

Soft Skills

• Analytical Skills

Certifications & Qualifications

• AWS Certification
• Azure Certification
• GCP Certification
• CISSP
• CCSP

Industry Keywords

• Cloud Governance
• Security Process Integration
• Cloud Security Frameworks
• Cloud Onboarding
• Enterprise Policies

Tools & Technologies

• AWS Security Hub
• Azure Defender
• GCP SCC
• Excel Reporting