Cloud CSPM

Job Description: - Lead implement and management of CSPM capabilities to provide unified visibility of risks, misconfigurations, and insecure assets across Azure subscriptions and resource groups. - Lead design, implement, and governance of Cloud Security Posture Management (CSPM) capabilities across multi-cloud and hybrid environments, providing unified visibility into risks, misconfigurations, insecure assets, and policy violations. - Define and institutionalize cloud security posture evaluation frameworks, leveraging industry benchmarks (CIS, NIST, ISO 27001) and provider-native security scores to continuously measure and improve risk posture. - Drive advanced risk correlation, combining cloud misconfigurations, vulnerabilities, identity and access permissions, and exposure data to identify end-to-end attack paths and prioritize remediation based on business impact. - Lead secure architecture reviews for complex cloud workloads, including IaaS, PaaS, containerized platforms, and hybrid integrations, ensuring alignment with security-by-design principles. - Define and enforce Zero Trust architecture patterns across cloud services and hybrid workloads, covering identity, network segmentation, workload isolation, and least-privilege access. - Act as a trusted security advisor to enterprise and cloud architects, embedding security controls, guardrails, and governance into all new cloud initiatives and transformation programs. - Oversee the integration of CSPM and cloud security telemetry into SIEM/SOAR platforms, enabling centralized monitoring, threat correlation, and automated response workflows. - Define security playbooks and response workflows for cloud misconfigurations, exposure risks, identity abuse, and non-compliant resources, ensuring operational consistency at scale. - Provide technical leadership and guidance to SOC and cloud operations teams in interpreting cloud security alerts and responding to emerging threats across cloud environments. - Ensure policy enforcement and governance controls are consistently applied across cloud accounts, subscriptions, and projects to meet regulatory and internal security standards. - Deliver audit-ready compliance dashboards and executive reports for senior leadership, risk committees, and external regulators. - Drive continuous improvement initiatives to enhance compliance scores, reduce risk posture gaps, and improve mean time to remediation (MTTR) across cloud environments. - Mentor and upskill L1/L2/L3 cloud security engineers and analysts.