Role Overview

We are looking for a highly skilled Cloud Security SME to join the Information Security team of a leading General Insurance organization. The role will focus on strengthening and enhancing the cloud security posture across multi-cloud environments, primarily AWS and Azure, with exposure to Oracle Cloud Infrastructure (OCI).

The ideal candidate should possess strong expertise in cloud security architecture, governance, monitoring, compliance, and security enablement across cloud platforms. This is a hands-on security governance and architecture role, not a cloud development or DevOps role.

Key Responsibilities

Own cloud security governance framework across AWS accounts (Control Tower / Landing Zone setup)
Drive cloud security initiatives across AWS, Azure, and OCI environments
Review and strengthen cloud security architecture and configurations
Define and implement cloud security best practices, policies, and standards
Monitor cloud environments for security risks, vulnerabilities, and compliance gaps
Enable and manage cloud-native security controls and monitoring tools
Validate Cloud Security Provider adherence to Security Policy and Control Standard
Work closely with infrastructure, SOC, and application teams to improve cloud security posture
Ensure secure configuration and governance of IAM, SSO, cross-account roles, MFA, JIT/PAM access, network security (segmentation), logging, encryption, and access management
Conduct security assessments, audits, and risk reviews for cloud workloads
Recommend and ensure secure configuration implementation related to cloud hardening and security optimization including secure configuration of EC2, EKS, ECS, Lambda, S3, RDS, DynamoDB. Validate implementation of Security Groups / NACLs, Encryption (KMS, ACM), Secrets management
Support incident response and investigation related to cloud environments
Maintain alignment with regulatory and compliance requirements relevant to the insurance industry

Requirements

5–10 years of overall Information Security experience with strong exposure to Cloud Security
Strong hands-on understanding of AWS and Microsoft Azure security architecture
Working knowledge of Oracle Cloud Infrastructure (OCI) security concepts
Expertise in cloud security architecture, IAM & access governance, security monitoring & logging, compliance & governance, and security hardening
Experience with cloud security posture management and monitoring tools
Good understanding of cloud risks, threat vectors, and mitigation strategies
Hands on experience of overseeing security controls in CI/CD pipeline, container image vulnerability management.
Ability to work as a Subject Matter Expert (SME) for cloud security initiatives