Lead GCP Cloud Security Controls Engineer, VP

Morgan Stanley; Alpharetta (GA); On-site; USD 180,000 - 280,000; Full time

Job summary

Morgan Stanley is seeking a Lead GCP Platform Cloud Security Controls Engineer, VP, to drive hands-on security control implementation across enterprise GCP environments. You will translate requirements into automated policies and enforce secure deployments, partnering with platform engineering and security teams.

The role requires deep policy-writing skills, Terraform/IaC expertise, and experience operating at scale in cloud-native environments.

Qualifications

• Bachelors or equivalent experience in computer science or information security.
• 7+ years in cloud security, platform security, or security engineering.
• Experience implementing security controls in GCP with policy authoring, testing, deployment and ops support.
• Hands-on with GCP organization policies and IAM/VPC security capabilities.
• Strong Terraform and IaC experience for secure deployments.
• Experience integrating security checks into CI/CD pipelines with Git workflows.
• Proficient in Python/Go/Bash/PowerShell.
• Ability to translate security requirements into technical controls and evidence.

Responsibilities

• Lead design, coding, testing, deployment, and operation of GCP-native security controls across enterprise GCP orgs, folders, projects, and workloads.
• Translate requirements into automated, testable, enforceable cloud security policies.
• Author and maintain GCP policies and IAM guardrails, plus network/data-perimeter controls.
• Apply policy-engineering patterns from AWS/Azure or similar frameworks.
• Implement preventive controls in Terraform and CI/CD workflows.
• Implement detective and runtime controls using GCP services and CSPM.
• Design remediation workflows and clear ownership/evidence capture.
• Own end-to-end control lifecycle and governance.
• Define metrics and evidence for control coverage and remediation status.
• Provide technical direction and mentorship to engineers.

Skills

GCP security

Terraform

CI/CD integration

Policy authoring

Scripting languages (Python/Go/Bash)

Cloud security engineering

Stakeholder communication

Mentorship & leadership

Education

Bachelor's degree in Computer Science or Information Security

Equivalent practical experience

Tools

GCP IAM

VPC Service Controls

Security Command Center

Terraform

CI/CD tooling

Job description

Morgan Stanley is seeking a Lead GCP Platform Cloud Security Controls Engineer, VP, to drive hands-on security control implementation across enterprise GCP environments. You will translate requirements into automated policies and enforce secure deployments, partnering with platform engineering and security teams.

The role requires deep policy-writing skills, Terraform/IaC expertise, and experience operating at scale in cloud-native environments.