Cloud Security Officer

Cloud Security Officer - International Fin-Tech company | Hybrid working model | Skopje - North Macedonia

About The Organisation Well-established international IT and technology-services organisation supporting banks and financial institutions with end-to-end technology solutions. Its services span electronic payments, software systems, hybrid cloud hosting, infrastructure and operational technology services. The organisation operates in a regulated financial-services environment and supports secure, resilient and efficient banking technology across international markets.

The Role The Cloud Security Officer is responsible for assessing, designing and overseeing security controls across enterprise cloud environments. The role combines practical cloud-security knowledge with second-line information-security oversight: independently assessing solutions, identifying risks, recommending proportionate controls, documenting findings and challenging or advising technical teams where necessary.

The position works closely with Engineering, Software Development, application owners, project teams, business stakeholders and other Information Security functions. It reports into the Information Security and Risk Management function.

Core Technical Environment

• Microsoft Azure security and cloud-security architecture
• Microsoft 365 security and information-protection controls
• Microsoft Entra ID, including identity and access management
• Azure RBAC and least-privilege access models
• Conditional Access policies and authentication controls
• Privileged Identity Management (PIM)
• Managed identities and secure service-to-service authentication
• Microsoft Intune and endpoint/device security management
• Microsoft Defender security capabilities
• Microsoft Purview and Data Loss Prevention (DLP)
• Cloud Security Posture Management (CSPM) and continuous security improvement
• Security defence principles, cloud risk assessment and control design.

Key Responsibilities

• Investigate and analyse existing cloud environments and identify opportunities to strengthen their security.
• Assess proposed and existing cloud solutions, identify security risks and recommend practical, proportionate controls.
• Design, oversee and continuously improve cloud-security controls and security solutions.
• Collaborate with Engineering and Software Development teams to embed security best practices and appropriate controls throughout the development and technology lifecycle.
• Identify security gaps and vulnerabilities, support remediation and track issues through to resolution.
• Manage and execute processes supporting assigned Information Protection and cloud-security capabilities, including documentation, tool integration, gap assessment and continuous improvement.
• Prepare for and conduct internal security reviews and audits against internal requirements and recognised international standards.
• Analyse cloud-security trends, threats and industry best practices and provide relevant recommendations.
• Operate actively within a second-line security function, providing independent oversight, challenge and guidance while maintaining effective cooperation with first-line technical teams.

What We Are Looking For

• Solid foundations in information security and a good understanding of security defence principles.
• Practical experience with Microsoft Azure and Microsoft 365 security.
• Working knowledge of Entra ID, Azure RBAC, Conditional Access, PIM and managed identities.
• Experience or strong familiarity with Intune, Microsoft Defender, Microsoft Purview/DLP and cloud-security posture management.
• Ability to assess technical solutions, identify risks and translate findings into clear, proportionate security recommendations.
• Strong analytical and problem-solving skills, with the ability to take ownership of security topics through to resolution.
• Ability to document assessments, controls, risks, decisions and recommendations clearly.
• Strong communication and collaboration skills across technical, security and business teams.
• A proactive mindset and willingness to continuously learn as cloud platforms, threats and security practices evolve.

Advantageous Experience

• Relevant Microsoft/Azure or broader information-security certifications.
• Knowledge of PowerShell for administration, investigation or security automation.
• Previous experience within banking, financial services or another regulated environment.
• Experience working with security and compliance frameworks such as ISO 27001, PCI DSS and GDPR.
• Experience working in a second-line Information Security, Risk or Security Assurance function.

The Offer

• A substantial degree of flexibility and autonomy in how responsibilities are performed.
• Challenging and varied work in an international financial-technology environment.
• A flat management structure and close collaboration across teams.
• Long-term prospects with opportunities for professional development and growth.
• A collaborative, team-oriented and international working environment.
• Opportunities for business travel.
• A hybrid working model.