Cloud & Information Security Architect

Sabenza IT & Recruitment; Johannesburg; On-site; ZAR 80,000 - 110,000; Full time

Job summary

A leading recruitment firm seeks a Cloud & Information Security Architect to enhance cloud security operations and align them with global standards. The successful candidate will bridge technical teams and stakeholders, ensuring secure migrations to Azure environments and overseeing cloud transformation initiatives.

Qualifications

• 10+ years of experience in cloud security, architecture, or information security roles.
• Microsoft Certified: Azure Security Engineer Associate.
• Certified Information Systems Security Professional (CISSP).

Responsibilities

• Review and enhance cloud security policies aligned with industry standards.
• Conduct gap analyses and recommend remediation steps.
• Develop a secure Cloud Migration Security Framework.

Skills

Cloud Security Architecture

Cloud Governance and Risk Management

DevSecOps Integration

Education

Bachelor’s or Master’s degree in Computer Science

ISO 27001 Lead Implementer or Auditor

Job description

We are looking for a highly skilled Cloud & Information Security Architect to lead the review, enhancement, and implementation of cloud security policies and frameworks. This role involves aligning existing cloud security operations with leading global standards, conducting risk and gap assessments, and guiding secure migration strategies for Azure-based environments. The successful candidate will act as a key liaison between technical teams and stakeholders to drive security-focused cloud transformation initiatives.

Key Responsibilities :

• Review and enhance existing cloud security policies and procedures to ensure they are robust and aligned with industry best practices.
• Map and align organizational policies to leading security and compliance standards including :
• DESC ISR v2
• NIST 800-53 (Security and Privacy Controls)
• Conduct comprehensive gap analyses against mapped standards and recommend remediation steps.
• Engage with business and technical stakeholders to assess current risk posture and gather requirements.
• Analyze the existing Azure cloud setup, identify security weaknesses, and propose architectural improvements.
• Develop a Cloud Migration Security Framework that supports scalable and secure transition of services to the cloud.
• Triage applications for cloud readiness and risk based on the developed framework and prioritize migration sequencing.
• Provide expert advice and architectural oversight across cloud initiatives to ensure adherence to security principles.
• Collaborate with DevOps, Infrastructure, and Application teams to embed security into CI / CD and cloud-native designs.
• Ensure ongoing monitoring and reporting mechanisms are in place for compliance tracking and risk visibility.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or a related field.
• Microsoft Certified : Azure Security Engineer Associate
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• 10+ years of experience in cloud security, architecture, or information security roles.
• Proven experience working with Azure cloud environments and security configurations.
• Deep understanding of security controls and compliance requirements in regulated industries.
• Practical knowledge of mapping and implementing DESC ISR v2, ISO 27017, and NIST 800-53 standards.
• Experience conducting risk assessments, gap analyses, and designing secure cloud migration strategies.

Key Skills :

• Cloud Security Architecture (Azure preferred)
• DESC ISR v2, ISO 27017, NIST 800-53 Mapping
• Cloud Governance and Risk Management
• Security Gap Analysis and Remediation Planning
• Azure Security Controls and Services
• Stakeholder Engagement & Communication
• DevSecOps Integration

Requirements

Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or a related field. Microsoft Certified : Azure Security Engineer Associate Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) ISO 27001 Lead Implementer or Auditor (a plus) 10+ years of experience in cloud security, architecture, or information security roles. Proven experience working with Azure cloud environments and security configurations. Deep understanding of security controls and compliance requirements in regulated industries. Practical knowledge of mapping and implementing DESC ISR v2, ISO 27017, and NIST 800-53 standards. Experience conducting risk assessments, gap analyses, and designing secure cloud migration strategies. Key Skills : Cloud Security Architecture (Azure preferred) DESC ISR v2, ISO 27017, NIST 800-53 Mapping Cloud Governance and Risk Management Security Gap Analysis and Remediation Planning Azure Security Controls and Services Stakeholder Engagement & Communication Secure Cloud Migration Frameworks Application Risk Triage & Prioritization DevSecOps Integration