Primary Responsibilities Lead cloud security service delivery, technical governance and continuous improvement across Azure, Microsoft 365 and hybrid environments. Own CSPM/CNAPP baselines, policy-as-code, cloud connector coverage, posture dashboards and risk prioritization. Govern Microsoft Defender for Cloud plans for VMs, containers, storage, SQL, Key Vault, App Services and relevant Paa S services. Lead cloud identity and CIEM reviews covering PIM, privileged roles, service principals, managed identities, permissions and credential rotation. Review landing zones, network architecture, private connectivity, encryption, key management, logging, monitoring, backup and resilience controls. Provide security architecture input and validate designs before onboarding or material change of cloud, Saa S and AI-enabled services. Lead cloud incident response, root-cause analysis, containment and remediation across identity, workload, data and control-plane events. Establish vulnerability and configuration remediation priorities using exploitability, exposure, asset criticality, attack paths and data sensitivity. Drive container/Kubernetes security, image scanning, admission controls, RBAC, runtime protection and Kube/API audit monitoring. Integrate security into Git Hub/Azure Dev Ops pipelines through IaC scanning, secrets detection, dependency analysis and release guardrails. Govern exceptions and break-glass workflows with time-bounded approval, compensating controls and after-action review. Integrate cloud security telemetry with SIEM/SOAR and automate enrichment, ticketing and approved containment. Lead periodic configuration/compliance reviews against CIS, Azure Security Benchmark, UAE IA, ISO/IEC 27001 and ADHICS. Provide executive reporting on posture trends, high-risk attack paths, exposures, workload coverage, identity risk, SLAs and exceptions. Mentor analysts/engineers, assure technical quality and lead workshops with client, CPX and technology partners. Secondary Responsibilities Support cloud security strategy, modernization roadmaps, business cases and technology evaluations. Lead disaster recovery security reviews and resilience testing for cloud workloads. Support RFP/RFI responses, client presentations and technical documentation. Maintain market awareness and recommend improvements based on emerging cloud and AI threats. Skills / Certifications
SC-100 Microsoft Cybersecurity Architect or AZ-500CCSP and/or CCSKCISSP or CISM (preferred) Azure Solutions Architect Expert (advantage) CKS or equivalent Kubernetes security certification (advantage) ITIL Foundation or higher (advantage) Soft skills: Excellent written and verbal communication, Analytical thinking and problem solving, Attention to detail and quality, Accountability and ownership, Teamwork and stakeholder collaboration, Ability to prioritize and meet deadlines, Ability to work at client sites and provide after-hours support when required
Minimum Work Experience7+ years of information security experience, including at least 6 years in cloud security and 2 years leading enterprise cloud security operations or engineering.
Education
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent. Postgraduate qualification in information/cyber security is an advantage.