{bc}
Apply
oracle

Cloud Security - Assistant Manager

KPMG Global Services
Noida, IND
Full-time
Manager · 6–8 years experience
Onsite
Discovered 1 weeks ago
awsazureazure-functionscloudformationdockerkubernetes

Full Job Posting

Qualifications

  • This role is for you if you have the below
  • Educational qualifications
  • Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.•Master’s degree in Cybersecurity, Cloud Computing, or Information Systems is preferred.•Equivalent practical experience may be considered for exceptional candidates.•
  • Work experience
  • 5.5–7 years in cloud security operations and engineering with progressive responsibility in securing enterprise cloud environments across AWS and Azure.•Oversee enterprise-scale cloud security architecture, policy governance, and security operations across AWS and Azure environments.•Lead implementation and management of cloud-native security controls including IAM, security groups, network segmentation, and encryption services.•Manage day-to-day cloud security operations including monitoring, alert triage, incident response, and remediation coordination across AWS and Azure platforms.•Drive cloud security posture improvement using CSPM tools (Wiz, Prisma Cloud, or similar); identify misconfigurations, prioritize findings, and track remediation to closure.•Lead cross-functional teams in cloud security operations, vulnerability management, and compliance initiatives aligned with security standards.•Drive adherence to defined SLAs and KPIs across cloud security operations; track, report, and continuously improve operational metrics and service delivery standards.•Manage and track security incidents, service requests, and change management activities through ITSM/ticketing platforms such as ServiceNow, ensuring timely updates, escalations, and closures.•Architect secure cloud networking solutions: design VPC/VNet topologies, implement transit gateways, Azure Firewall, AWS Network Firewall, and Network Virtual Appliances (NVAs).•Coordinate security incident response across global teams; develop and refine playbooks, SLAs, and escalation procedures for cloud environments.•Develop and maintain executive dashboards presenting cloud security metrics, risk posture, and compliance status to senior leadership.
  • The ideal candidate will:
  • Demonstrate solid understanding of cloud security architectures across AWS and Azure, with a strong grasp of Zero Trust principles and defense-in-depth strategies.•Design secure cloud topologies, define security governance workflows, and guide risk-based access controls.•Produce clear SOPs, runbooks, security assessment reports, and technical design documents for cloud environments.•Collaborate with compliance, architecture, DevOps, and operations teams to ensure security by design.•Drive continuous improvements via automation, Infrastructure as Code (IaC), and actionable security metrics.•Effectively manage day-to-day security operations while balancing strategic initiatives and stakeholder expectations.•Demonstrate ability to define, monitor, and drive SLA/KPI compliance across security operations, ensuring consistent and measurable service delivery.
  • Mandatory Certification Required:
  • (At least one required; multiple strongly preferred)
  • Core Certifications
  • · AWS Certified Solutions Architect – Associate · AZ-500 – Microsoft Certified Azure Security Engineer – Associate · Wiz Certified Cloud Fundamentals
  • Preferred Advanced Certifications
  • · AWS Certified Security – Specialty · Microsoft Certified: Cloud and AI Security Engineer Associate · Certified Cloud Security Professional (CCSP) · Certified Information Systems Security Professional (CISSP)
  • Technical Skills Required:
  • Cloud Security:
  • Good working knowledge of AWS security services: IAM, Security Groups, NACLs, AWS Config, GuardDuty, Security Hub, CloudTrail, KMS, AWS WAF.•Good working knowledge of Azure security services: Azure AD/Entra ID, NSGs, Azure Firewall, Microsoft Sentinel, Key Vault, Azure Policy, Defender for Cloud.•Proven experience leading cloud security assurance programs, compliance audits, and governance frameworks across AWS and Azure.•Experience with CSPM tools (Wiz preferred; Prisma, Aqua Sec etc.) for posture management, automated compliance, and vulnerability remediation.
  • Cloud Networking and Architecture:
  • Hands-on experience designing AWS VPC architectures: security groups, NACLs, transit gateways, VPC peering, PrivateLink, and Direct Connect.•Proficiency with Azure Virtual Networks (VNets), NSGs, Azure Firewall, User-Defined Routes (UDRs), Application Gateway, and ExpressRoute.•Understanding of hybrid cloud connectivity, micro-segmentation, and secure network architectures across AWS and Azure.•Familiarity with Zero Trust architecture principles and cloud-native security design patterns.
  • Security Operations & Analytics:
  • Hands-on experience managing day-to-day cloud security operations including monitoring security alerts, triaging incidents, and coordinating remediation activities across AWS and Azure.•Strong ability to perform security assessments, configuration reviews, and compliance checks within AWS and Azure environments.•Experience investigating findings in cloud environments, conducting root cause analysis, and implementing preventive controls.•Proficiency in reviewing and responding to security findings from CSPM tools (Wiz, Prisma Cloud, or similar) and ensuring timely resolution within defined SLAs.•Experience working with ITSM/ticketing tools such as ServiceNow to log, track, prioritize, and close security incidents and service requests in line with defined SLAs and KPIs.
  • DevSecOps & Automation:
  • Familiarity with Infrastructure as Code (Terraform, CloudFormation, ARM templates) and integrating security controls into IaC pipelines.•Understanding of CI/CD security integration, container security (Docker, Kubernetes), and API security.•Experience with automation scripting (Python, PowerShell, Lambda, or Azure Functions) to support and improve security operations.
  • Behavioral / team skills
  • Strong communication and stakeholder management skills, including ability to explain complex security concepts in simple terms.•Analytical mindset with strong problem‐solving and decision‐making skills.•High level of ownership, accountability, and attention to detail.•Ability to handle multiple priorities in fast‐paced cloud and security environments.•Collaborative mindset with a willingness to mentor junior team members.•Proactive, structured, and self-driven approach to work.•Strong documentation and presentation abilities.
  • Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.
  • Equivalent practical experience may be considered for exceptional candidates.
  • 5–7 years in cloud security operations and engineering with progressive responsibility in securing enterprise cloud environments across AWS and Azure.
  • Oversee enterprise-scale cloud security architecture, policy governance, and security operations across AWS and Azure environments.
  • Lead implementation and management of cloud-native security controls including IAM, security groups, network segmentation, and encryption services.
  • Manage day-to-day cloud security operations including monitoring, alert triage, incident response, and remediation coordination across AWS and Azure platforms.
  • Drive cloud security posture improvement using CSPM tools (Wiz, Prisma Cloud, or similar); identify misconfigurations, prioritize findings, and track remediation to closure.
  • Lead cross-functional teams in cloud security operations, vulnerability management, and compliance initiatives aligned with security standards.
  • Drive adherence to defined SLAs and KPIs across cloud security operations; track, report, and continuously improve operational metrics and service delivery standards.
  • Manage and track security incidents, service requests, and change management activities through ITSM/ticketing platforms such as ServiceNow, ensuring timely updates, escalations, and closures.
  • Architect secure cloud networking solutions: design VPC/VNet topologies, implement transit gateways, Azure Firewall, AWS Network Firewall, and Network Virtual Appliances (NVAs).
  • Coordinate security incident response across global teams; develop and refine playbooks, SLAs, and escalation procedures for cloud environments.
  • Develop and maintain executive dashboards presenting cloud security metrics, risk posture, and compliance status to senior leadership.
  • Demonstrate solid understanding of cloud security architectures across AWS and Azure, with a strong grasp of Zero Trust principles and defense-in-depth strategies.
  • Design secure cloud topologies, define security governance workflows, and guide risk-based access controls.
  • Produce clear SOPs, runbooks, security assessment reports, and technical design documents for cloud environments.
  • Collaborate with compliance, architecture, DevOps, and operations teams to ensure security by design.
  • Drive continuous improvements via automation, Infrastructure as Code (IaC), and actionable security metrics.
  • Effectively manage day-to-day security operations while balancing strategic initiatives and stakeholder expectations.
  • Demonstrate ability to define, monitor, and drive SLA/KPI compliance across security operations, ensuring consistent and measurable service delivery.
  • Good working knowledge of AWS security services: IAM, Security Groups, NACLs, AWS Config, GuardDuty, Security Hub, CloudTrail, KMS, AWS WAF.
  • Good working knowledge of Azure security services: Azure AD/Entra ID, NSGs, Azure Firewall, Microsoft Sentinel, Key Vault, Azure Policy, Defender for Cloud.
  • Proven experience leading cloud security assurance programs, compliance audits, and governance frameworks across AWS and Azure.
  • Hands-on experience designing AWS VPC architectures: security groups, NACLs, transit gateways, VPC peering, PrivateLink, and Direct Connect.
  • Proficiency with Azure Virtual Networks (VNets), NSGs, Azure Firewall, User-Defined Routes (UDRs), Application Gateway, and ExpressRoute.
  • Understanding of hybrid cloud connectivity, micro-segmentation, and secure network architectures across AWS and Azure.
  • Familiarity with Zero Trust architecture principles and cloud-native security design patterns.
  • Hands-on experience managing day-to-day cloud security operations including monitoring security alerts, triaging incidents, and coordinating remediation activities across AWS and Azure.
  • Strong ability to perform security assessments, configuration reviews, and compliance checks within AWS and Azure environments.
  • Experience investigating findings in cloud environments, conducting root cause analysis, and implementing preventive controls.
  • Proficiency in reviewing and responding to security findings from CSPM tools (Wiz, Prisma Cloud, or similar) and ensuring timely resolution within defined SLAs.
  • Experience working with ITSM/ticketing tools such as ServiceNow to log, track, prioritize, and close security incidents and service requests in line with defined SLAs and KPIs.
  • Familiarity with Infrastructure as Code (Terraform, CloudFormation, ARM templates) and integrating security controls into IaC pipelines.
  • Understanding of CI/CD security integration, container security (Docker, Kubernetes), and API security.
  • Experience with automation scripting (Python, PowerShell, Lambda, or Azure Functions) to support and improve security operations.
  • Strong communication and stakeholder management skills, including ability to explain complex security concepts in simple terms.
  • Analytical mindset with strong problem‐solving and decision‐making skills.
  • High level of ownership, accountability, and attention to detail.
  • Ability to handle multiple priorities in fast‐paced cloud and security environments.
  • Collaborative mindset with a willingness to mentor junior team members.
  • Proactive, structured, and self-driven approach to work.
  • Strong documentation and presentation abilities.

Responsibilities

  • This role is for you if you have the below
  • Educational qualifications
  • Bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, or a related field.•Master's degree in Information Technology or Business Administration (preferred).•Formal training in Microsoft 365, Cloud Technologies, Collaboration Platforms, or Enterprise Infrastructure Management is desirable
  • Work experience
  • ·6–8 years of experience in Microsoft technologies, Enterprise Messaging, Collaboration Platforms, and Cloud Infrastructure Administration.·Minimum 5 years of hands-on experience managing and supporting Microsoft 365 (Office 365) environments in large enterprise settings.·Experience administering and optimizing core Microsoft 365 services including Exchange Online, Microsoft Teams, SharePoint Online, OneDrive for Business, and Microsoft Entra ID (Azure AD).·Proven experience in tenant administration, platform governance, compliance, and security management.·Experience managing Microsoft 365 migrations, upgrades, and transformation initiatives.·Strong background in incident management, service requests, problem management, and operational support.·Experience working with global teams and managing enterprise collaboration and productivity platforms.·Experience in implementing Microsoft 365 security, compliance, and governance best practices.
  • The ideal candidate will:
  • ·Act as a Subject Matter Expert (SME) for Microsoft 365 services and platform operations.·Manage the day-to-day administration, governance, and optimization of the Microsoft 365 environment.·Ensure high availability, performance, and reliability of Microsoft 365 services.·Lead platform administration activities across Exchange Online, Teams, SharePoint Online, OneDrive, and Microsoft Entra ID.·Manage tenant configurations, user lifecycle management, licensing administration, and service health monitoring.·Lead troubleshooting and resolution of complex Microsoft 365 incidents and service disruptions.
  • Bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, or a related field.
  • Master's degree in Information Technology or Business Administration (preferred).
  • Formal training in Microsoft 365, Cloud Technologies, Collaboration Platforms, or Enterprise Infrastructure Management is desirable

Preferred Qualifications

  • Master’s degree in Cybersecurity, Cloud Computing, or Information Systems is preferred.
  • (At least one required; multiple strongly preferred)
  • Preferred Advanced Certifications
  • Experience with CSPM tools (Wiz preferred; Prisma, Aqua Sec etc.) for posture management, automated compliance, and vulnerability remediation.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at KPMG Global Services

Associate 1 - FTE_AM HF&PE_Kochi

Kochi, IND

Discovered TodayFull-time

Manager - WFM (Functional)

Bengaluru, IND

Discovered TodayFull-time

Senior Associate

Bengaluru, IND

Discovered TodayFull-time

SA2 - ACH

Kolkata, IND

Discovered TodayFull-time

Senior Associate 1 - Canada

Bengaluru, IND

Discovered TodayFull-time

Assistant Manager Passthrough

Bengaluru, IND

Discovered TodayFull-time

Assistant Manager_GCT ERP Swiss

Bengaluru, IND

Discovered TodayFull-time

Consultant_GTC_Oracle GTM

Bengaluru, IND

Discovered TodayFull-time