IT&Data Cloud Security Posture Analyst

Infosys; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Danone seeks a Cloud Security Posture Analyst to monitor and improve security across Azure, AWS, and GCP. You will ensure compliance with policies and baselines while collaborating with security, risk, and engineering teams.

Responsibilities include CSPM monitoring, risk assessments, and reporting on security posture. The role emphasizes continuous improvement, automation, and staying ahead of cloud threats with governance and oversight across multiple cloud platforms.

Qualifications

• Cloud security fundamentals across Azure, AWS, and GCP.
• Experience with CSPM and cloud governance.
• Knowledge of GDPR, NIS2, and DORA requirements.
• Strong analytical and stakeholder management skills.

Responsibilities

• Support cloud security governance, policies, and controls.
• Monitor CSPM dashboards and posture indicators.
• Identify misconfigurations and security gaps; support remediation with platform teams.
• Develop cloud security dashboards and KPIs; report on posture improvements.

Skills

Cloud security fundamentals

CSPM

IAM

Governance & risk

Security frameworks

Monitoring & reporting

Education

MCA

Integrated BCA+MCA

Bachelor of Engineering

BCA

BSc

Tools

Microsoft Defender for Cloud

Wiz

Prisma Cloud

Orca

Lacework

Terraform

ARM

Bicep

Job description

Job Description & Role Summary

The IT&Data Cloud Security Posture Analyst is responsible for monitoring, assessing, and improving the security posture of Danone's cloud environments across Azure, AWS, GCP, and SaaS platforms. The role ensures cloud services comply with cybersecurity policies, security baselines, and regulatory requirements while supporting proactive identification and remediation of cloud security risks. The position collaborates with Cloud Engineering, Infrastructure, Application, Security Operations, Risk, and Compliance teams to strengthen cloud governance and ensure secure cloud adoption across the organization.

Roles & Responsibilities

Cloud Security Governance & Compliance

• Support implementation of cloud security standards, policies, and controls.
• Monitor compliance with cloud security baselines and regulatory requirements.
• Ensure cloud environments adhere to security best practices and governance standards.

Cloud Security Posture Management

• Monitor CSPM dashboards and security posture indicators.
• Identify cloud misconfigurations, excessive permissions, exposed resources, and security gaps.
• Support remediation activities with cloud platform teams and application owners.
• Track security posture improvements and risk reduction initiatives.

Cloud Risk Assessment

• Perform cloud security assessments for new and existing cloud services.
• Identify risks associated with cloud deployments and recommend mitigation actions.
• Support cloud architecture reviews from a cybersecurity perspective.

Reporting & Stakeholder Management

• Develop cloud security dashboards, KPIs, and posture reports.
• Provide recommendations for improving cloud security maturity.
• Work closely with cloud architects, engineers, and business stakeholders.

Continuous Improvement

• Support cloud security automation initiatives.
• Contribute to cloud security awareness and best-practice adoption.
• Stay informed about emerging cloud threats and security technologies.

Required Skills & Competencies

Functional & Technical Skills

• Cloud security fundamentals (Azure, AWS, and/or GCP).
• Cloud Security Posture Management (CSPM).
• Identity and Access Management (IAM).
• Cloud governance and risk management.
• Knowledge of security frameworks (NIST, ISO 27001, CIS Benchmarks).
• Cloud security monitoring and reporting capabilities.

Technical RequirementBehavioral Competencies

• Analytical mindset.
• Strong stakeholder management skills.
• Problem-solving capabilities.
• Attention to detail.
• Continuous learning attitude.

Good to Have Functional & Technical Skills

• Microsoft Defender for Cloud.
• Wiz, Prisma Cloud, Orca, Lacework, or equivalent CSPM solutions.
• Infrastructure as Code (Terraform, ARM, Bicep).
• Cloud container security and Kubernetes security.
• Knowledge of GDPR, NIS2, and DORA requirements.

Behavioral Competencies

• Project coordination skills.
• Change management experience.

Educational Requirement

• MCA
• Intergrated course BCA+MCA
• Bachelor of Engineering
• BCA
• BSc

Preferred Skills

• Technology->Infrastructure Security->Cloud Security
• Technology->Cloud Security->AWS - GRC
• Technology->Cloud Security->Microsoft Azure - Infrastructure security->Azure Update Management
• Foundational->Development process generic->SaaS Development Process->SaaS

Service Line

• Cyber Security