Requirements
Requires a Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a relevant field. A minimum of 7 years of experience in cloud security is necessary, with specific expertise in cloud security architecture and cyber security. Familiarity with industry standards like NIST, ISO/IEC 27001, and CSA guidelines is essential.
Description
Job description / Role
Job Type
Full Time
Job Location
UAE
Nationality
Any Nationality
Salary
Not Specified
Gender
Not Specified
Arabic Fluency
Not Specified
Job Function
IT - Software & Web Development
Company Industry
Software & Internet Services
Job purpose
Design secure and reliable cloud solutions to protect the organization's digital assets from internal and external cyber threats. This position involves developing and implementing a comprehensive cloud security strategy, conducting thorough analyses of current infrastructure and applications, and collaborating with stakeholders to align cloud security architecture with business goals. The role also includes creating and maintaining robust cloud security architecture, performing regular security assessments, ensuring compliance with industry standards, and managing risks associated with cloud-based projects.
Key activities, responsibility & accountability
Cloud strategy and planning
Develop and implement the organization's cloud security strategy.
Conduct comprehensive analysis of current infrastructure and applications to determine optimal cloud security solutions.
Collaborate with stakeholders to align cloud security architecture with business goals.
Design and develop cloud security architecture
Create and maintain a comprehensive cloud security architecture that ensures the security of cloud-based systems.
Identify the specific security needs of your organization, including compliance requirements, data sensitivity, and business objectives.
Develop and validate security controls to protect cloud infrastructure and applications.
Review solution designs for cloud-based projects and ensure those align with information security and compliance requirements.
Provide security recommendations for new cloud projects.
Maintain and update the cloud security decision tool to ensure easy decision making for cloud projects.
Security assessments and compliance
Perform regular security assessments to ensure security of the cloud platforms.
Perform scheduled security assessments for cloud-based solutions.
Support audit teams during cloud audits.
Perform continuous evaluation and ensure compliance with security standards.
Ensure compliance with industry security standards and regulations.
Incident response
Work with incident response team to support investigation of cloud-related incidents.
Risk management
Conduct risk assessments and develop mitigation strategies.
Review risks raised for cloud-related projects and perform risk evaluation.
Update the risk tracker and maintain the same.
Track risks from risk tracker on a regular basis.
Evaluate third-party vendor security posture and ensure that their practices comply with company standards and regulatory requirements.
Lead efforts to manage security risks in the supply chain.
Reporting & documentation
Prepare detailed reports on risk assessments, security audits, and compliance activities.
Track and report on the departmental KPI on a periodic basis.
Create and maintain security baselines for cloud technologies.
Establish clear cloud security decision matrix that governs access control, data protection, incident response, and compliance.
Adopt industry standards and frameworks such as NIST, ISO/IEC 27001, and the Cloud Security Alliance (CSA) guidelines.
Provide training and guidance on cloud security best practices for team members.
Maintain up-to-date knowledge of cloud security trends, threats, and countermeasures.
Stay up to date on the latest security threats, tools, and trends.
Mentor junior resources on cloud-related projects.
Communicate findings and recommendations to both technical and non-technical stakeholders at various levels of the organization.
Health and safety, security, and business continuity
All individuals take personal responsibility for safety; follow company HSE policies, procedures and instructions; avoid complacency and continuously challenge existing conditions and activities in order to identify discrepancies that might result in error or inappropriate action; report any situation that could present a hazard; not intentionally or recklessly interfere with or misuse anything provided at the workplace in the interest of health, safety, welfare or protection or management of the environment.
Follow all relevant security policies, processes, procedures, and instructions to ensure security compliance in all aspects of work, by applying them on self, others, and corporate assets.
Follow all relevant business continuity and resilience requirements for compliance with, and adherence to, policies, procedures and instructions related to the effective planning for, and response to, incidents and/or business disruptions to continue critical business processes and activities with minimal adverse impact.
Professional certifications
CISSP, SC-100, CEH, AWS Certified, multiple Azure certifications, TOGAF/ COBIT certified
Qualifications
Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or relevant field.
Experience
Bachelor’s degree with 7 years’ experience, diploma, military or police academy graduate with 10 years’ experience, or high school with 12 years’ experience.
Apply Now