IT&Data Cloud Security Posture Analyst

Responsibilities

Key Responsibilities

Cloud Security Governance & Compliance

• Support implementation of cloud security standards, policies, and controls.
• Monitor compliance with cloud security baselines and regulatory requirements.
• Ensure cloud environments adhere to security best practices and governance standards.

Cloud Security Posture Management

• Monitor CSPM dashboards and security posture indicators.
• Identify cloud misconfigurations, excessive permissions, exposed resources, and security gaps.
• Support remediation activities with cloud platform teams and application owners.
• Track security posture improvements and risk reduction initiatives.

Cloud Risk Assessment

• Perform cloud security assessments for new and existing cloud services.
• Identify risks associated with cloud deployments and recommend mitigation actions.
• Support cloud architecture reviews from a cybersecurity perspective.

Reporting & Stakeholder Management

• Develop cloud security dashboards, KPIs, and posture reports.
• Provide recommendations for improving cloud security maturity.
• Work closely with cloud architects, engineers, and business stakeholders.

Continuous Improvement

• Support cloud security automation initiatives.
• Contribute to cloud security awareness and best-practice adoption.
• Stay informed about emerging cloud threats and security technologies.

Required Skills & Competencies

Functional & Technical Skills

• Cloud security fundamentals (Azure, AWS, and/or GCP).
• Cloud Security Posture Management (CSPM).
• Identity and Access Management (IAM).
• Cloud governance and risk management.
• Knowledge of security frameworks (NIST, ISO 27001, CIS Benchmarks).
• Cloud security monitoring and reporting capabilities.

Technical and Professional Requirements

Behavioral Competencies

• Analytical mindset.
• Strong stakeholder management skills.
• Problem-solving capabilities.
• Attention to detail.
• Continuous learning attitude.

Good to Have Functional & Technical Skills

• Microsoft Defender for Cloud.
• Wiz, Prisma Cloud, Orca, Lacework, or equivalent CSPM solutions.
• Infrastructure as Code (Terraform, ARM, Bicep).
• Cloud container security and Kubernetes security.
• Knowledge of GDPR, NIS2, and DORA requirements.

Behavioral Competencies

• Project coordination skills.
• Change management experience.

Preferred Skills

• Cloud Security
• AWS – GRC
• Azure Update Management
• SaaS

Educational Requirements

MCA,Intergrated course BCA+MCA,Bachelor of Engineering,BCA,BSc