Cloud Security, Expert

jeffersonhealth; Pennsylvania; On-site; USD 110,000 - 150,000; Full time

Job summary

Jefferson Health is seeking a senior cloud governance leader to manage security posture across Azure and Microsoft 365. You will design and maintain policies and baselines, partnering with cloud engineering to enforce secure configurations and remediate findings.

You will oversee cloud-focused risk assessments, advise on governance priorities, and report progress to senior leadership to strengthen overall information security and compliance posture.

Qualifications

• Bachelor's degree or equivalent with 7+ years in cloud/governance/security.
• Experience designing policies, standards and baselines.
• Proven ability to lead governance initiatives and report to leadership.

Responsibilities

• Lead cloud governance and security posture across Azure and Microsoft 365.
• Develop policies, standards and configuration baselines; manage exceptions.
• Oversee risk assessments and communicate posture progress to leadership.
• Collaborate with cloud engineering to remediate findings and verify actions.

Skills

Cloud governance

Security posture

Azure

Microsoft 365

Risk assessments

Policy design

Leadership

Education

Bachelor's degree in STEM

High School Diploma/GED with certs

Tools

Azure

Microsoft 365

Job description

Number of Positions In Requisition
1

Job Details

Accountable for spearheading the organization's cloud governance and security posture management across the Azure and Microsoft 365 environment, ensuring sustained compliance with the organization's cloud security benchmark and the continuous reduction of cloud-based risk. This position owns the design and ongoing maintenance of cloud-relevant policies, standards, and configuration baselines, and partners with cloud engineering to enforce secure configurations, remediate posture findings, and validate corrective actions. Provides targeted oversight of cloud-focused risk assessments, advises on governance priorities, and reports on cloud compliance and posture progress to leadership, advancing the organization's overall information security and compliance posture.

Job Description

Summary

Accountable for spearheading the organization's cloud governance and security posture management across the Azure and Microsoft 365 environment, ensuring sustained compliance with the organization's cloud security benchmark and the continuous reduction of cloud-based risk. This position owns the design and ongoing maintenance of cloud-relevant policies, standards, and configuration baselines, and partners with cloud engineering to enforce secure configurations, remediate posture findings, and validate corrective actions. Provides targeted oversight of cloud-focused risk assessments, advises on governance priorities, and reports on cloud compliance and posture progress to leadership, advancing the organization's overall information security and compliance posture.

Job Duties

• Provide strategic vision and roadmap for cloud governance and compliance across the Azure and Microsoft 365 environment, aligning cloud GRC activities with organizational objectives and regulatory requirements.
• Design and continually enhance cloud-related information security policies, standards, and configuration baselines, including processes to manage and document exceptions.
• Provide oversight of targeted risk assessments that support cloud governance and compliance objectives, synthesizing findings to inform leadership on cloud security posture and emerging cloud-based risks.
• Spearhead cloud governance and security posture management across the Azure and Microsoft 365 environment, ensuring sustained compliance with the organization's cloud security benchmark and recommending control settings to restrict insecure configurations.
• Partner with cloud engineering to remediate posture findings, validate corrective actions, and report on remediation progress and overall cloud security posture to leadership.
• Collaborate with cross-functional teams, particularly cloud engineering, to integrate cloud governance, security, and compliance requirements into operational policies, processes, and platform standards.
• Mentor and coach GRC analysts supporting cloud governance and compliance activities, fostering operational excellence and professional growth.
• Develop dashboards and data pipelines to measure and communicate cloud compliance, posture progress, and related governance metrics to senior stakeholders

Minimum Qualifications

• Bachelor's Degree in a science, technology, engineering, or math discipline or High School Diploma/GED and preferred certifications.
• 7 years related work experience

Physical Demands

Lift and carry 25 lbs. frequent sitting/standing, frequent keyboard use, *patient care providers may be required to perform activities specific to their role including kneeling, bending, squatting and performing CPR.

Job Description Disclaimer: This position description provides the major duties/responsibilities, requirements and working conditions for the position. It is intended to be an accurate reflection of the current position, however management reserves the right to revise or change as necessary to meet organizational needs. Other responsibilities may be assigned when circumstances require.

Work Shift

Workday Day (United States of America)

Worker Sub Type

Regular

Employee Entity

Thomas Jefferson University Primary Location Address
1100 Virginia Drive, Fort Washington, Pennsylvania, United States of America

Nationally ranked, Jefferson, which is principally located in the greater Philadelphia region, Lehigh Valley and Northeastern Pennsylvania and southern New Jersey, is reimagining health care and higher education to create unparalleled value. Jefferson is more than 65,000 people strong, dedicated to providing the highest-quality, compassionate clinical care for patients; making our communities healthier and stronger; preparing tomorrow's professional leaders for 21st-century careers; and creating new knowledge through basic/programmatic, clinical and applied research. Thomas Jefferson University , home of Sidney Kimmel Medical College, Jefferson College of Nursing, and the Kanbar College of Design, Engineering and Commerce, dates back to 1824 and today comprises 10 colleges and three schools of