cloud security manager

Ford Motor Company

<div>We are seeking a highly experienced and strategic Security Engineering and Operations Manager to lead and optimize our cloud security monitoring, incident response, and operational practices within our Google Cloud Platform (GCP) environment. This role is crucial for ensuring the continuous effectiveness of our security controls and maintaining a strong security posture.
The ideal candidate will possess a deep understanding of security best practices, operational methodologies, and compliance frameworks (especially SOC 2). While not primarily a hands-on technical role, you will leverage your strong technical acumen to guide security engineers, drive operational improvements, enhance threat awareness, and translate complex security data into actionable insights through effective dashboarding and reporting. You will be responsible for managing the lifecycle of security operations, fostering a culture of proactive security, and ensuring our operations align with Ford Credit's business objectives and regulatory requirements</div>
 <div><ul><li>Bachelor's degree in Computer Science, Information Security, or a related technical field, or equivalent practical experience.
</li><li>8+ years of progressive experience in Information Security, with at least 3+ years in a leadership or managerial role focused on Security Operations, SOC management, or Security Engineering management.
</li><li>Demonstrated experience in implementing and managing security monitoring and incident response programs.
</li><li>Strong knowledge of security operations best practices, processes, and frameworks (e.g., NIST, ISO 27001).
</li><li>In-depth understanding and practical experience with SOC 2 compliance requirements and audit processes.
</li><li>Experience with cloud security operations in GCP, including services like Security Command Center, Cloud Logging, Cloud Monitoring, Chronicle, Cloud Armor, and Cloud IDS/IPS.
</li><li>Hands-on experience with security tools and technologies such as SIEMs, Endpoint Detection and Response (EDR), Web Application Firewalls (WAFs), Intrusion Detection Systems (IDS), and vulnerability scanners.
</li><li>Proven ability to design and implement security dashboards and reporting mechanisms to provide actionable insights.
</li><li>Solid understanding of threat detection methodologies, MITRE ATT&amp;CK framework, and common attack vectors.
</li><li>Knowledge of network protocols, operating system internals, and security monitoring techniques.
</li><li>Excellent communication, interpersonal, and leadership skills, with the ability to effectively manage teams, influence stakeholders, and present complex information clearly to diverse audiences.
</li><li>Strong troubleshooting and problem-solving skills, with an analytical approach to security challenges.
</li></ul>Preferred Qualification:
<ul><li>Relevant certifications such as CISSP, CISM, GCIH, CCSP, or GCP Professional Cloud Security Engineer.
</li><li>Experience with Security Orchestration, Automation, and Response (SOAR) platforms.
</li><li>Experience managing a Security Operations Center (SOC) or similar operational security team.
</li><li>Knowledge of data lake concepts and technologies for security data aggregation and analysis.</li></ul></div>
 <div><ul><li>Lead and manage day-to-day security operations, including security monitoring, incident response, vulnerability management, and threat intelligence processes.
</li><li>Develop, implement, and continuously refine security operations strategies and best practices to enhance the efficiency and effectiveness of our security posture in GCP.
</li><li>Oversee the lifecycle of security incidents, from detection and analysis to containment, eradication, recovery, and post-incident review.
</li><li>Drive the integration of threat intelligence into security monitoring and incident response workflows to improve detection and prevention capabilities.
</li><li>Implement and manage best practices for security logging, event correlation, and alert generation within the GCP ecosystem and integrated security platforms.
</li><li>Oversee the selection, implementation, and optimization of security operations tools, including SIEMs (e.g., Google Chronicle, Splunk), EDR, IDS/IPS, WAFs, and vulnerability scanners.
</li><li>Ensure the effective utilization of GCP-native security services such as Security Command Center, Cloud Logging, Cloud Monitoring, Cloud Armor, and IDS/IPS solutions for operational visibility and threat detection.
</li><li>Collaborate with security engineers to ensure security tools are properly configured, maintained, and integrated into operational workflows.
</li><li>Ensure all security operations and monitoring activities adhere to relevant regulatory and compliance frameworks, with a strong focus on SOC 2 requirements.
</li><li>Develop and maintain documentation for security operations processes, procedures, and controls to support audit requirements.
</li><li>Work closely with internal and external auditors during compliance assessments, providing evidence and explanations related to security operations.
</li><li>Drive continuous improvement in security operations to meet evolving compliance standards.
</li><li>Foster a culture of proactive threat awareness within the security operations team and across relevant stakeholders.
</li><li>Design, build, and maintain comprehensive security dashboards, metrics, and reports to provide clear visibility into security posture, operational performance, and key risk indicators for various audiences (technical teams to executive leadership).
</li><li>Communicate effectively on security incidents, threats, and operational status to stakeholders, ensuring timely and accurate information dissemination.
</li><li>Provide leadership, mentorship, and guidance to security engineers and analysts, fostering their professional growth and technical capabilities.
</li><li>Collaborate extensively with cross-functional teams (e.g., development, infrastructure, compliance, risk management) to ensure security operations are aligned with broader organizational goals.
</li><li>Manage vendor relationships for security tools and services relevant to security operations.</li></ul></div>

Security Engineering and Operations Manager

HCLTech

<div><div><div><div>This role provides expert leadership in managing and optimizing cloud security operations, specifically leveraging AWS Security services and Cisco ASA firewalls. The position ensures operational excellence, drives continuous improvement, and empowers teams to deliver secure, reliable, and scalable solutions. The individual will play a pivotal role in aligning security operations with client requirements, proactively resolving complex issues, and fostering innovation to advance organizational objectives. (1.) Key Responsibilities 
1. Lead cloud infrastructure security management by configuring, monitoring, and optimizing AWS Security services (such as AWS IAM, GuardDuty, Security Hub, and CloudTrail) to ensure compliance, threat mitigation, and operational excellence. 
2. Oversee network security operations using Cisco ASA, implementing advanced firewall policies, VPN configurations, and intrusion prevention strategies to safeguard critical systems and data. 
3. Develop and implement incident response processes in AWS and Cisco ASA environments, ensuring timely detection, escalation, and resolution of security events. 
4. Drive operational process improvements by analyzing security operations data in AWS and Cisco ASA, identifying automation opportunities, and integrating innovative tools and scripts for efficiency and accuracy. 
5. Mentor and guide operational teams on AWS Security best practices and Cisco ASA configurations, fostering a culture of continuous learning and high performance within the team. 
6. Serve as a primary escalation point for complex security issues, collaborating with internal stakeholders to deliver expert solutions tailored to client requirements and regulatory standards. 
7. Provide technical leadership in aligning security operations with organizational goals, ensuring transparent communication of operational metrics, risks, and opportunities for improvement. 
 
Skill Requirements 
1. Excellent Proficiency In Cisco Asa Firewall Administration, Including Advanced Rule Configuration, Vpn Setup, And Network Segmentation For Enterprise Environments. 
2. Advanced Skills In Incident Detection, Response, And Remediation Within Aws And Cis</div>
</div><div>No. of Positions
<div>1</div>
</div><div>Skill (Primary)
<div>Information Security-Cloud Security-Cloud Security
</div></div><div>Auto req ID
<div>1632531BR</div>
</div><div>Skill Level 3 (Secondary Skill 1)
<div>Cyber Security-CLOUD SECURITY-CLOUD SECURITY</div></div></div></div><div></div>

CONSULTANT

Truist

<div>The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.
Need Help?
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:
Regular
Language Fluency: English (Required)
Work Shift:
1st shift (United States of America)<div>
Please review the following job description:</div>
The Head of Cloud Security Tooling is responsible for the strategy, selection, governance, and lifecycle management of the enterprise cloud security technology stack, including CSPM, CNAPP, CIEM, SSPM, vulnerability management, code scanning, SIEM, identity tooling, and network/endpoint security. This leader ensures security tools integrate seamlessly into cloud platforms, DevSecOps pipelines, IAM, SOC, and compliance workflows. The role ensures the enterprise maintains a unified, rationalized, cost-optimized suite of security tools that supports both human analysts and Agentic AI digital workforce agents.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.
Tooling Strategy &amp; Governance<ul><li>
Own and govern the Cloud Security Tooling Strategy, ensuring coverage across IaaS, PaaS, SaaS, containers, and serverless.</li><li>
Define multi-year roadmap for CNAPP, CSPM, CIEM, SSPM, SAST/SCA/DAST, SIEM, secrets management, and cloud identity tooling.</li><li>
Rationalize and consolidate overlapping tools; define standards and guardrails.</li><li>
Evaluate emerging technologies such as eBPF runtime sensors, LLM-powered detection, and AI-driven risk engines.</li></ul>
Platform Integration &amp; Engineering<ul><li>
Drive integration of tools into core platforms:<ul><li>
AWS/Azure native services</li><li>
GitLab/Terraform pipelines</li><li>
CrowdStrike, Zscaler, Palo Alto</li><li>
ServiceNow VR/IRM</li><li>
Splunk SIEM/TI</li></ul></li><li>
Ensure strong telemetry collection, unified APIs, and microservices for automated decisioning and MCP agent orchestration.</li></ul>
Operational Management<ul><li>
Oversee licensing, procurement, budgeting, and vendor relationships.</li><li>
Ensure enterprise-wide adoption of tools with standard operating procedures and documentation.</li><li>
Enable SOC, Cloud Security Operations, AppSec, and IAM teams with the right tools to detect, prevent, and respond to cloud threats.</li></ul>
Compliance &amp; Assurance<ul><li>
Align tooling coverage with NIST 800-53 Rev5, FedRAMP High, SOX, PCI, and internal policies.</li><li>
Ensure tools provide evidence for controls such as:<ul><li>
AC-, AU-, SC-, CM-, SI- families</li><li>
SSPM and identity governance</li><li>
Continuous monitoring requirements for regulators</li></ul></li></ul>
QUALIFICATIONS
Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1. Bachelor&rsquo;s degree and ten to twelve years of experience in systems engineering or an equivalent combination of education and work experience
2. Strong functional and technical knowledge of information/cyber security capabilities with deep expertise in one or more of the following areas: Encryption, Data Security, Application Security, End Point Security, Identity and Access Management, Windows/Unix/Linux Systems Security, Mainframe Security, Perimeter Security, Network Security, Mobility Security, Cloud Security, Cyber Security, Cryptography, or Authentication Systems
3. Strong understanding of service lifecycle management, strategic planning, and the cyber security landscape
Preferred Qualifications:<ul><li>
10+ years in cybersecurity architecture, engineering, or operations.</li><li>
Deep knowledge of cloud security tool categories and enterprise deployment models.</li><li>
Strong vendor management and contract negotiation skills.</li><li>
Expertise in cloud-native architectures, containers, serverless, and DevSecOps tooling.</li><li>
Familiarity with MCP/Agentic AI integration models.</li><li>
Experience building unified control planes for cloud security tools.</li><li>
Financial industry or highly regulated sector experience.</li></ul>
OTHER JOB REQUIREMENTS / WORKING CONDITIONS
Sitting
Constantly (More than 50% of the time)
Visual / Audio / Speaking
Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.
Manual Dexterity / Keyboarding
Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers.
Availability
Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need.
Travel
Minimal and up to 10%
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>

Head of Cloud Security Tooling

Concentrix

<div><div><div>Global Security
</div><div><div><div>Location</div><div>
Gurugram, India</div></div></div><div></div><div> 
Job Title:
Senior Manager &ndash; Governance, Risk &amp; Compliance (Global Security)
Job Description
We are seeking an experienced Security professional to support and enhance the organization&rsquo;s Governance, Risk &amp; Compliance (GRC) program across HITRUST, HIPAA, Cyber Essentials (CE/CE+), AI Risk Management, and Cloud Security domains. The role is responsible for maintaining compliance documentation, supporting certification and audit readiness, driving security control assessments, and ensuring consistent governance across business and technology environments. 
 
This position will also provide advisory and support to global security programs such as ISO 27001, ISO 42001, and other standards to ensure alignment and harmonization of security practices across the enterprise. 
 
Key Responsibilities: 
 
Develop, maintain, and review security policies, procedures, and control documentation for GRC and regulatory alignment. 
 
Conduct risk assessments across IT, Cyber, Cloud, and AI environments, ensuring mitigation and follow-up on open risks. 
 
Contribute to AI Risk Management by assessing risks and controls related to Generative AI and automated systems. 
 
Support Cloud Security Governance, ensuring configurations and controls align with organizational standards and client commitments. 
 
Coordinate with global teams to support ISO 27001, ISO 42001, and related compliance programs. 
 
Assist in internal and client audits, preparing responses, evidence, and corrective action documentation. 
 
Maintain GRC dashboards, reports, and metrics to communicate risk and compliance posture to stakeholders.<div>
Job Title:</div>
Senior Manager &ndash; Governance, Risk &amp; Compliance (Security)
About the Role
We are seeking an experienced Security professional to strengthen our Governance, Risk &amp; Compliance (GRC) program across IT Security and Risk Management, AI Risk Management and System Impact Assessments, and Cloud Security domains.
This role will be responsible for maintaining compliance documentation, supporting certification and audit readiness, conducting security control assessments, and driving consistent governance practices across technology and business environments.
You will collaborate with cross-functional teams globally to support enterprise security initiatives and ensure alignment with recognized frameworks and standards.
Key Responsibilities<ul><li>
Support IT Security and Risk Management activities, including control testing, evidence collection, and remediation tracking.</li><li>
Develop, maintain, and review security policies, procedures, and control documentation for regulatory and organizational alignment.</li><li>
Conduct risk assessments across IT, Cyber, Cloud, and AI environments, ensuring timely mitigation of identified risks.</li><li>
Contribute to AI Risk Management, evaluating risks and controls related to Generative AI, LLMs, and automated systems.</li><li>
Support Cloud Security Governance, ensuring configurations and controls meet internal standards and client expectations.</li><li>
Coordinate with global teams to support HITRUST, HIPAA, Cyber Essentials, and related security and compliance programs.</li><li>
Assist in internal and client audits, preparing responses, audit evidence, and corrective action documentation.</li><li>
Maintain GRC dashboards, reports, and risk metrics to communicate control effectiveness and compliance posture.</li></ul>
Qualifications &amp; Experience<ul><li>
10+ years of experience in IT Security, Cyber Risk, or GRC roles.</li><li>
Hands-on experience with IT and Cloud Risk Management programs.</li><li>
Strong understanding of security controls, risk management principles, and cloud security (AWS, Azure, GCP).</li><li>
Working knowledge of AI governance and emerging regulatory frameworks (e.g., ISO 42001, EU AI Act).</li><li>
Familiarity with ISO 27001, NIST CSF, and related security frameworks.</li><li>
Excellent analytical, documentation, and communication skills.</li></ul>
Preferred Certifications: CISA, CISSP, CISM, HCISPP, CRISC, ISO 27001 Lead Implementer, or equivalent.
Why Join Us
You will be part of a dynamic global security team working at the intersection of technology, risk, and innovation. This role offers the opportunity to influence how emerging technologies such as Cloud and Generative AI are governed securely and responsibly across a leading global enterprise.
Location:
IND Gurgaon - Bld 14 IT SEZ Unit 1, 17th C &amp; D and Gd Flr D
Language Requirements:
Time Type:
Full time
If you are a California resident, by submitting your information, you acknowledge that you have read and have access to the Job Applicant Privacy Notice for California Residents</div></div></div><div></div>

Senior Manager – Governance, Risk & Compliance (Global Security)

Thermo Fisher Scientific

<div>Work Schedule
Standard (Mon-Fri)
Environmental Conditions
Office
Job Description
Discover Impactful Work: The Senior Manager for Cloud Security has global responsibility for a team of dedicated engineers in charge of running, maintaining, and supporting solutions crafted to protect, detect and respond to security threats in our multi-cloud environment.<h2 class="jobSectionHeader">
A Day in the Life:</h2><ul><li>
Lead a team of cloud security engineers, and identify critical areas for improvement in the technology used within cloud platforms such as GCP, AWS, and Azure</li><li>
Continuously providing insight on ways to apply the technology present more efficiently</li><li>
The primary point of responsibility in cloud security efficiency in terms of ensuring its running according to governance and compliance policies</li></ul><h2 class="jobSectionHeader">
Keys to Success:</h2><ul><li>
Use of influence skills to acquire agreement and participation from various groups and partners without direct control</li><li>
Ensure documentation and processes are well defined so that the engineered solutions are understood and repeatable</li><li>
Ensure solutions are well built, backed up &amp; restore tested, and consistently maintained for health</li><li>
Proactively communicate and collaborate with the business on maintaining our security posture.</li></ul><h2 class="jobSectionHeader">
Education</h2><ul><li>
Bachelor's Degree in cybersecurity, computer science, systems engineering, or related field. Equivalent work experience is accepted</li><li>
Certifications not required, but encouraged: CISSP, CCSP, AWS, Azure, or GCP related certifications</li><li>
Demonstrate strong organizational and leadership capabilities</li></ul><h2 class="jobSectionHeader">
Experience</h2><ul><li>
5+ years of leadership experience directing a team</li><li>
3+ years proven experience in AWS, Azure, and GCP</li><li>
Strong organization skills, leading sophisticated projects</li></ul><h2 class="jobSectionHeader">
Knowledge, Skills, Abilities</h2><ul><li>
Strong problem-solving in both ambiguous and tactical situations with a bias for action</li><li>
Validated flexibility and ability to perform in a multidimensional environment</li><li>
Excellent written and verbal communication skills</li><li>
Dedication to excellence, high-quality standards, and attention to detail</li></ul></div>

Sr. Manager, Cloud Cybersecurity

Accenture

Project Role : Security Architect 
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
 
Must have skills : One Identity Manager 
Good to have skills : NA 
Minimum 5 year(s) of experience is required 
Educational Qualification : 15 years full time education 
 
Summary: As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve collaborating with various teams to document the implementation of cloud security controls and facilitate the transition to cloud security-managed operations, ensuring that all security measures align with organizational objectives and compliance standards. You will engage in discussions to refine security strategies and provide guidance on best practices, contributing to a secure and efficient cloud environment. Roles &amp; Responsibilities: - Expected to be an SME. - Collaborate and manage the team to perform. - Responsible for team decisions. - Engage with multiple teams and contribute on key decisions. - Provide solutions to problems for their immediate team and across multiple teams. - Facilitate training sessions to enhance team knowledge and skills in cloud security. - Evaluate and recommend new security technologies and practices to improve the overall security posture. Professional &amp; Technical Skills: - Must To Have Skills: Proficiency in One Identity Manager. - Good To Have Skills: Experience with cloud security frameworks and compliance standards. - Strong understanding of identity and access management principles. - Experience in designing and implementing security architectures for cloud environments. - Familiarity with risk assessment methodologies and security best practices. Additional Information: - The candidate should have minimum 5 years of experience in One Identity Manager. - This position is based at our Bengaluru office. - A 15 years full time education is required.
 
15 years full time education

Security Architect

airtel

<div>
 
 Position:
 
 Key Account Manager &ndash; Enterprise
 
 
 
 Location:
 
 PAN India
 
 
 
 Purpose Of The Role
 
 
 
 Responsible for end-to-end telecom, cloud, and security needs of a set of 30&ndash;35 enterprise accounts, primarily mid to large segment. The role focuses on driving revenue growth by positioning
 
 Airtel&rsquo;s Digital Services portfolio
 
 (Cloud, Security, Data Center, IoT, CPaaS) alongside core connectivity offerings.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Build and maintain strategic relationships with key decision-makers (Middle/Senior Management, CXOs) across enterprise accounts.
 </li>
 <li>
 Drive revenue growth and retention in existing accounts across Data, Voice, Cloud, and Security solutions.
 </li>
 <li>
 Identify and create opportunities in Cloud adoption (migration, DR/backup, app hosting) and Security services (SOC, managed security, compliance).
 </li>
 <li>
 Engage with CIOs, CTOs, and CISOs to understand their digital priorities and align Airtel offerings accordingly.
 </li>
 <li>
 Collaborate with internal specialist teams and external partners/vendors to deliver integrated solutions and ensure business target achievement.
 </li>
 <li>
 Achieve account business targets: order booking, revenues, collections, new account identification, and churn control.
 </li>
 <li>
 Augment solution selling and drive new product penetration, particularly in emerging markets.
 
 
 </li>
 </ul>
 
 Key Competencies
 
 
 
 <ul>
 <li>
 Commercial Acumen &amp; Enterprise Solution Selling
 </li>
 <li>
 Consultative Selling for Cloud &amp; Security Solutions
 </li>
 <li>
 Customer Service Orientation and Executive Presence (handling CXO-level discussions)
 </li>
 <li>
 Key Account Planning &amp; Management
 </li>
 <li>
 Negotiation Skills &amp; Competitive Positioning
 </li>
 <li>
 Strong knowledge of Cloud (Private/Public/Hybrid), Data Center, Security, and Enterprise Networking
 </li>
 <li>
 Ability to devise creative ideas to attract and engage target customers
 
 
 </li>
 </ul>
 
 Experience &amp; Qualifications
 
 
 
 <ul>
 <li>
 Proven experience in selling Cloud and Security solutions to enterprise customers.
 </li>
 <li>
 Exposure to deal structuring, pricing, and competitive positioning.
 </li>
 <li>
 Strong understanding of digital transformation, data protection, compliance, and cybersecurity.
 </li>
 <li>
 Ability to collaborate with internal and external teams to deliver integrated solutions.
 
 
 </li>
 </ul>
 Once you give the go-ahead, we will share the JD with the Marketing team today, and it will be posted on
 
 LinkedIn from the Airtel Business page
 
 
 
 The agenda of this LinkedIn post is to attract talent to our Sales team&mdash;professionals with Cloud and Solution Selling expertise who can bring innovative solutions to life for our customers. We are looking for individuals who can drive enterprise growth, manage strategic client relationships, and deliver tangible business impact.
 
 
 
 Role Details
 
 
 
 <ul>
 <li>
 Req ID: Already created
 </li>
 <li>
 Job Title: Key Account Manager
 </li>
 <li>
 Location: PAN India
 </li>
 <li>
 Application: Link to apply will be included in the LinkedIn post
 
 
 </li>
 </ul>
 #BAL
</div>

Key Account Manager

Search 10000+ Cloud security manager jobs near you this November. New roles added regularly across leading industries. Apply today.