Cloud Security, Expert

Thomas Jefferson University; Orlando (FL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Tuition discounts

Retirement plans

Job summary

Thomas Jefferson University is seeking a senior cloud governance leader to drive security posture across Azure and Microsoft 365. You will design and maintain cloud policies and baselines, partner with cloud engineering to remediate findings, and report progress to leadership.

The role requires guiding risk assessments and aligning governance with regulatory requirements, while mentoring GRC analysts and developing governance dashboards.

Qualifications

• Bachelor’s degree in science/tech/engineering/mathematics or equivalent.
• 7 years of related work experience.
• Experience in cloud governance and security controls.

Responsibilities

• Lead cloud governance and security posture across Azure and Microsoft365.
• Design and maintain cloud policies, standards, and baselines.
• Partner with cloud engineering to remediate posture findings and enforce secure configurations.
• Develop dashboards and report cloud compliance metrics to leadership.

Skills

Cloud governance

Security posture management

Azure

Microsoft 365

Risk assessments

Leadership & reporting

Education

Bachelor’s Degree in STEM

Tools

Azure

Microsoft 365

Job description

Number of Positions In Requisition 1 Job Details

Accountable for spearheading the organization's cloud governance and security posture management across the Azure and Microsoft 365 environment, ensuring sustained compliance with the organization's cloud security benchmark and the continuous reduction of cloud-based risk. This position owns the design and ongoing maintenance of cloud-relevant policies, standards, and configuration baselines, and partners with cloud engineering to enforce secure configurations, remediate posture findings, and validate corrective actions. Provides targeted oversight of cloud-focused risk assessments, advises on governance priorities, and reports on cloud compliance and posture progress to leadership, advancing the organization's overall information security and compliance posture.

Job Description Summary

Accountable for spearheading the organization's cloud governance and security posture management across the Azure and Microsoft 365 environment, ensuring sustained compliance with the organization's cloud security benchmark and the continuous reduction of cloud-based risk. This position owns the design and ongoing maintenance of cloud-relevant policies, standards, and configuration baselines, and partners with cloud engineering to enforce secure configurations, remediate posture findings, and validate corrective actions. Provides targeted oversight of cloud-focused risk assessments, advises on governance priorities, and reports on cloud compliance and posture progress to leadership, advancing the organization's overall information security and compliance posture.

Job Duties

• Provide strategic vision and roadmap for cloud governance and compliance across the Azure and Microsoft365 environment, aligning cloud GRC activities with organizational objectives and regulatory requirements.
• Design and continually enhance cloud-related information security policies, standards, and configuration baselines, including processes to manage and document exceptions.
• Provide oversight of targeted risk assessments that support cloud governance and compliance objectives, synthesizing findings to inform leadership on cloud security posture and emerging cloud-based risks.
• Spearhead cloud governance and security posture management across the Azure and Microsoft365 environment, ensuring sustained compliance with the organization's cloud security benchmark and recommending control settings to restrict insecure configurations.
• Partner with cloud engineering to remediate posture findings, validate corrective actions, and report on remediation progress and overall cloud security posture to leadership.
• Collaborate with cross-functional teams, particularly cloud engineering, to integrate cloud governance, security, and compliance requirements into operational policies, processes, and platform standards.
• Mentor and coach GRC analysts supporting cloud governance and compliance activities, fostering operational excellence and professional growth.
• Develop dashboards and data pipelines to measure and communicate cloud compliance, posture progress, and related governance metrics to senior stakeholders.

Minimum Qualifications

• Bachelor’s Degree in a science, technology, engineering, or math discipline or High School Diploma/GED and preferred certifications.
• 7 years related work experience.

Physical Demands

Lift and carry 25 lbs. frequent sitting/standing, frequent keyboard use, *patient care providers may be required to perform activities specific to their role including kneeling, bending, squatting and performing CPR.

Job Description Disclaimer

This position description provides the major duties/responsibilities, requirements and working conditions for the position. It is intended to be an accurate reflection of the current position, however management reserves the right to revise or change as necessary to meet organizational needs. Other responsibilities may be assigned when circumstances require.

Work Shift

Work Shift Workday Day (United States of America)

Worker Sub Type

Regular Employee

Entity

Thomas Jefferson University

Primary Location Address

1100 Virginia Drive, Fort Washington, Pennsylvania, United States of America

Benefits

Benefits Jefferson offers a comprehensive package of benefits for full-time and part-time colleagues, including medical (including prescription), supplemental insurance, dental, vision, life and AD&D insurance, short- and long-term disability, flexible spending accounts, retirement plans, tuition assistance, as well as voluntary benefits, which provide colleagues with access to group rates on insurance and discounts.

Tuition Discounts

Colleagues have access to tuition discounts at Thomas Jefferson University after one year of full time service or two years of part time service.

Medical Insurance

All colleagues, including those who work less than part-time (including per diem colleagues, adjunct faculty, and Jeff Temps), have access to medical (including prescription) insurance.

Company Culture

In keeping with Jefferson's Mission, We Improve Lives, it is our goal to recruit, retain, develop and reward highly-qualified employees. Jefferson encourages its employees to expand their knowledge and develop their careers through growth opportunities and continuing education. With a long standing history, Jefferson has been advancing the medical field from the heart of Center City Philadelphia for nearly 200 years. Our Mission, We Improve Lives, expands to every corner of the organization. From our weekly farmer’s market, to our new Jefferson Accelerator Zone for innovation, our employees’ passion for the community is evident by the daily gestures towards our patients, students and each other.