Azure Cloud Platform Security Lead

Responsibilities will include:

• Ensure that Azure foundation platform conforms to Client Cyber Security standards
• Incorporate Security patterns into Azure Cloud Services functional patterns
• Accountable for Azure foundation platform conformity to Client Operational Risk standards
• Ensure the Azure Foundation Platform conforms to all regulatory requirements
• Support the Cloud Controls Office and Internal audit functions with requests for information
• Prepare and submit clear, concise, factual, unbiased, thorough and timely reports for regulatory (HKMA) inquires
• Accountable for ensuring that robust SIEM (logging) and Monitoring processes are in place
• Ensure and maintain Business continuity plan for the Azure platform and carry out regular tests in line with Client standards Business contingency standards
• Maintain and manage all customer facing Security information and knowledge bases
• Be an Azure Platform evangelist with customers, partners and external communities
• Provide Management reporting to ensure data driven discussions for continuous improvement
• Gather requirements and provide continuous feedback loops between Cyber security, Controls office and the wider Azure Cloud Services team

Skills Required:

• Experience working in a security related discipline
• Experience dealing and responding to IT Audit
• Awareness of data security and regulatory requirements within financial services
• Security professional certification
• Acknowledged for driving decisions collaboratively, resolving conflicts and ensuring follow through with exceptional verbal and written communication skills
• Presentation skills with a high degree of comfort with both large and small audiences (Senior Executives, IT management and developers)
• Experience working with one or more Cloud service providers
• Experience in dealing with multiple support groups that contribute to creating a service
• Good leadership and teamwork skills - Works collaboratively in an agile environment with Stakeholders to deliver the service
• Operational effectiveness - delivers solutions that align to approved design patterns and security, risk and regulatory standards
• A track record of constantly looking for ways to do things better and an excellent understanding of the mechanism necessary to successfully implement change
• Set and achieved challenging short, medium and long term goals which exceeded the standards in their field
• Excellent written and spoken communication skills; an ability to communicate with impact, ensuring complex information is articulated in a meaningful way to wide and varied audiences

Essential Skills:

• Experience working in a cloud security/architecture team in an enterprise
• Experience working with controls, regulatory and audit functions
• Have experience managing stakeholders
• Have excellent written, verbal and presentation skills
• Demonstrable Risk Management knowledge
• Keen problem solving skills (Analytical and Creative)
• Experience working within an Agile environment
• Ability to quickly acquire new skills

Desirable Skills

• Experience and understanding of large scale infrastructure deployments in enterprise-wide environments required
• Understanding of ITIL framework
• Industry recognised Azure cloud certifications e.g. Azure Security
• Security certification (CISSP, CEH, CISM)
• Technical knowledge (Cloud Service Providers, IAM, OS, CI/CD and automation tooling)
• Technical knowledge and breadth of Azure technology services (Identity, Networking, Compute, Storage, Web, Mobile, Containers, Databases, Analytics, AI & Machine learning)
• Experience operating in highly regulated industry, e.g. Financial Services

Client is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. We are an equal opportunity employer and are committed to creating a diverse environment.