About the role
We're looking for a Senior cloud security professional/Associate Director with hands-on experience using Wiz and CNAPP solutions to strengthen security across cloud environments. The person in this role will help identify and prioritise cloud risks, support remediation, and work with engineering, platform, and security teams to improve cloud security posture.
Responsibilities:
- Lead or contribute to cloud security assessments across AWS, Azure, and/or GCP environments.
- Use Wiz to review cloud security posture, identify risks, and help teams prioritise remediation.
- Apply CNAPP capabilities across areas such as cloud posture management, workload protection, identity and entitlement risk, vulnerability management, and Kubernetes security.
- Analyse cloud findings in context, including configuration issues, vulnerabilities, access risks, and potential exposure paths.
- Partner with cloud engineering, DevOps, platform, and application teams to communicate findings and drive practical remediation.
- Help define and improve cloud security policies, standards, controls, and operating processes.
- Support the integration of cloud security findings into existing workflows and tools, such as ticketing or DevSecOps processes.
- Track remediation progress and communicate cloud security risks, priorities, and outcomes to technical and business stakeholders.
- Contribute to continuous improvement of the organization's cloud security and CNAPP practices.
Requirements:
- Strong professional experience in cloud security.
- Hands-on experience with a CNAPP platform.
- Hands-on experience with Wiz is mandatory.
- Practical understanding of cloud security risks and controls in AWS, Azure, and/or GCP.
- Experience reviewing cloud misconfigurations, vulnerabilities, identity or access risks, and security posture findings.
- Ability to work with technical teams to explain risks and support remediation.
- Strong communication and stakeholder management skills.
- Availability to join immediately or at short notice is preferred.
Additional experience:
- Familiarity with containers, Kubernetes, or workload security.
- Experience with API integrations or connecting security tools to engineering workflows.
- Experience with cloud governance, security standards, or compliance requirements.