Cloud Security Governance & Policy Lead

Job highlights

• 10-15 years experience in Cloud DevOps with expertise in Azure Policies, AWS Organizations, and CNAPP tools
• Design and manage cloud security controls, implement Zero Trust models, integrate security into CI/CD pipelines, and lead cloud governance and compliance efforts

Job Title: Cloud Security Governance & Policy Lead
Work Location: Chennai, TN/ Hyderabad, TS/ Bangalore, KA

Skills Required: Cloud DevOps
Experience: 10 - 15 Years

Job Description:

• Design, implement, and manage organization-wide controls using Azure Policies, AWS Organizations, SCPs, Config Rules, and Cloud Custodian.
• Engineer Zero Trust and least privilege models (RBAC, PBAC), region restrictions, and security controls across Cloud Platforms.
• Collaborate with DevOps and Cybersecurity teams to remediate non-compliant resources.
• Monitor policy effectiveness and continuously improve cloud governance posture.
• Provide technical leadership and mentorship on cloud policy best practices.
• Collaborate with risk, compliance, and audit teams to produce evidence of cloud control effectiveness.
• Implement and manage CNAPP policies using Wiz for continuous cloud posture assessment and remediation.
• Embed security early in the SDLC by integrating vulnerability scanning, IaC policy enforcement, and compliance checks into CI/CD pipelines (GitLab Runners).
• Develop policy-as-code frameworks using OPA/Rego to prevent misconfigurations before deployment.
• Integrate security controls into Infrastructure-as-Code (IaC) workflows using tools like Terraform.
• Champion shift-left practices, enabling developers to self-remediate security and compliance findings during coding and build stages.

Create SOAR playbooks to automate incident response and remediation