Cloud Security Architect Lead

Job Purpose

Design secure and reliable cloud solutions to protect the organization's digital assets from internal and external cyber threats. This position involves developing and implementing a comprehensive cloud security strategy, conducting thorough analyses of current infrastructure and applications, and collaborating with stakeholders to align cloud security architecture with business goals. The role also includes creating and maintaining robust cloud security architecture, performing regular security assessments, ensuring compliance with industry standards, and managing risks associated with cloud-based projects.

• Develop and implement the organization's cloud security strategy.
• Conduct comprehensive analysis of current infrastructure and applications to determine optimal cloud security solutions.
• Collaborate with stakeholders to align cloud security architecture with business goals.

• Create and maintain a comprehensive cloud security architecture that ensures the security of cloud-based systems.
• Identify the specific security needs of the organization, including compliance requirements, data sensitivity, and business objectives.
• Develop and validate security controls to protect cloud infrastructure and applications.
• Review solution designs for cloud-based projects and ensure alignment with information security and compliance requirements.
• Provide security recommendations for new cloud projects.
• Maintain and update the cloud security decision tool to support easy decision-making for cloud projects.

• Perform regular security assessments to ensure security of the cloud platforms.
• Perform scheduled security assessments for cloud-based solutions.
• Support audit teams during cloud audits.
• Perform continuous evaluation and ensure compliance with security standards.
• Ensure compliance with industry security standards and regulations.

• Work with incident response team to support investigation of cloud-related incidents.

• Conduct risk assessments and develop mitigation strategies.
• Review risks raised for cloud-related projects and perform risk evaluation.
• Update the risk tracker and maintain the same.
• Track risks from the risk tracker on a regular basis.
• Evaluate third-party vendor security posture and ensure compliance with company standards and regulatory requirements.
• Lead efforts to manage security risks in the supply chain.

• Prepare detailed reports on risk assessments, security audits, and compliance activities.
• Track and report on departmental KPIs on a periodic basis.
• Create and maintain security baselines for cloud technologies.
• Establish a clear cloud security decision matrix that governs access control, data protection, incident response, and compliance.
• Adopt industry standards and frameworks such as NIST, ISO/IEC 27001, and CSA guidelines.
• Provide training and guidance on cloud security best practices for team members.
• Maintain up-to-date knowledge of cloud security trends, threats, and countermeasures.
• Stay up to date on the latest security threats, tools, and trends.
• Mentor junior resources on cloud-related projects.
• Communicate findings and recommendations to both technical and non-technical stakeholders at various levels of the organization.

• All individuals take personal responsibility for safety; follow company HSE policies, procedures and instructions; avoid complacency and continuously challenge existing conditions and activities to identify discrepancies that might result in error or an appropriate action; report any situation that could present a hazard; do not intentionally or recklessly interfere with or misuse anything provided at the workplace in the interest of health, safety, welfare or protection or management of the environment.
• Follow all relevant security policies, processes, procedures, and instructions to ensure security compliance in all aspects of work, by applying them to self, others, and corporate assets.
• Follow all relevant business continuity and resilience requirements for compliance with, and adherence to, policies, procedures and instructions related to effective planning for, and response to, incidents and/or business disruptions to continue critical business processes and activities with minimal adverse impact.

• CISSP
• SC-100
• CEH
• AWS Certified
• Multiple Azure Certifications
• TOGAF/COBIT certified

Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or relevant field.

• 7 years’ experience for bachelor’s degree holders.
• 10 years’ experience for diploma, military, or police academy graduates.
• 12 years’ experience for high school graduates.