IT Cloud Cybersecurity Lead

Competitive Compensation

Stimulating Work Environment

Wide Range of Benefits

The IT Cloud Cybersecurity Lead defines, implements, and continuously improves security controls across Microsoft 365, Azure, identity, data protection, SaaS integrations, cloud data flows, and approved AI and Microsoft 365 agent capabilities. The role serves as a trusted security advisor to technology owners, project stakeholders, and operational teams, ensuring that secure-by-design principles are embedded across the enterprise.

• Drive the continuous improvement of the cloud security posture across Microsoft 365, Azure, approved SaaS platforms, and AI-enabled services.
• Define cloud security baselines, identity controls, data protection requirements, logging, monitoring, and secure configuration standards.
• Contribute to the cloud security roadmap by identifying priorities, recommending improvements, and driving implementation.
• Develop and report cloud security KPIs, KRIs, posture trends, compliance metrics, and remediation status to management.

• Lead Microsoft 365 security and Microsoft Purview initiatives, including identity protection, email and collaboration security, data loss prevention, sensitivity labelling, information protection, retention, insider risk, and data exposure reduction.
• Define and validate data protection and SaaS security controls for Microsoft 365, SharePoint, Teams, Exchange, One Drive, SaaS platforms, and business workflows.
• Monitor data security alerts, investigate exposure risks, and coordinate remediation with business, legal, compliance, and technical teams.
• Evaluate and implement Microsoft security capabilities across Microsoft Entra , Microsoft Defender XDR, Microsoft Purview, Microsoft Defender for Cloud, and Microsoft 365 security services.

• Strengthen cloud identity security across Microsoft Entra , Conditional Access, multifactor authentication, Identity Governance, Privileged Identity Management, and Zero Trust controls.
• Define standards for single sign-on, federation, authentication, authorization, lifecycle management, access recertification, and third‑party access governance.

• Review cloud architectures, solution designs, data flows, single sign‑on models, API integrations, operational readiness evidence, and security requirements.
• Define and validate security controls, exceptions, risk acceptance requirements, and go‑live security evidence for cloud and SaaS implementations.
• Lead Azure security posture improvement initiatives using Microsoft Defender for Cloud, Secure Score, and cloud‑native security controls.
• Collaborate with infrastructure, application, and delivery teams to integrate security controls into cloud delivery and Dev Sec Ops  practices.
• Automate recurring cloud security processes through policy‑as‑code, infrastructure‑as‑code, workflow automation, and reusable control patterns.
• Support application security reviews covering secure design, authentication and authorization, API security, secrets management, secure‑by‑design project controls, and remediation of findings.

• Define secure adoption and governance practices for Microsoft Copilot, Microsoft 365 agents, AI‑enabled services, and agentic AI capabilities that use enterprise data.
• Assess security, privacy, identity, data protection, prompt‑related risks, data exposure, and compliance risks related to AI implementations.

• Bachelor’s degree in information security, computer science, cloud technology, software engineering, or a related field.
• CISSP, CCSP, SC-100, AZ-500,…