VP, GCP Cloud Security Controls Engineer

Morgan Stanley; Alpharetta (GA); On-site; USD 150,000 - 210,000; Full time

Job summary

Morgan Stanley is seeking a Lead GCP Platform Cloud Security Controls Engineer, VP, in Alpharetta, GA, to drive hands-on cloud security work across enterprise GCP. You’ll convert security requirements into preventive, detective, and corrective controls, and own the end-to-end implementation lifecycle.

The role requires deep policy-writing skill, strong knowledge of GCP security architecture, and collaboration with platform engineering, security, and risk teams to ensure secure deployments and

Qualifications

• Bachelor's degree in computer science, Information Security, or related field, or equivalent experience.
• 5+ years hands-on cloud security, platform security, security engineering, or cloud control engineering experience.
• Production experience implementing security controls in GCP, including policy authoring, testing, deployment, and operational support.
• Hands-on experience with GCP organization policies and IAM, VPC Service Controls, Security Command Center, Cloud Logging, and related native security capabilities.
• Experience authoring cloud-native preventive policies, with GCP experience preferred; comparable AWS/Azure guardrails is relevant.
• Ability to translate security requirements into clear technical control logic, test cases, and implementation evidence.
• Strong understanding of GCP security architecture: IAM, networking, perimeters, encryption, and data protection.
• Experience with policy/automation code, version control, unit/integration testing, and release management.
• Ability to communicate decisions, risks, dependencies, and status to engineers and stakeholders.

Responsibilities

• Lead design, coding, testing, deployment, and operation of GCP-native security controls across enterprise organizations and workloads.
• Translate requirements into automated, testable, enforceable cloud security policies.
• Author and maintain GCP organization policies, IAM guardrails, network and data-perimeter controls.
• Implement detective and runtime controls using GCP services, CSPM, logging, and telemetry.
• Design remediation workflows and ownership assignments for control violations.
• Own end-to-end control implementation lifecycle from design to retirement.
• Determine effective enforcement points and compensating controls when needed.
• Build reusable policy libraries and implementation standards for consistency and speed.
• Collaborate with GCP platform engineering, security architecture, risk, and incident response teams.
• Troubleshoot control failures, false positives, pipeline issues, and production security events.

Skills

GCP Security

Cloud Security Engineering

Policy as Code

CI/CD Security

IAM & Guardrails

Runtime CSPM

Education

Bachelor's degree

Tools

GCP IAM

VPC Service Controls

Security Command Center

Job description

Morgan Stanley is seeking a Lead GCP Platform Cloud Security Controls Engineer, VP, in Alpharetta, GA, to drive hands-on cloud security work across enterprise GCP. You’ll convert security requirements into preventive, detective, and corrective controls, and own the end-to-end implementation lifecycle.

The role requires deep policy-writing skill, strong knowledge of GCP security architecture, and collaboration with platform engineering, security, and risk teams to ensure secure deployments and