IT&Data Cloud Security Posture Analyst

Job Overview:

• Position Summary
• The IT Data Cloud Security Posture Analyst plays a vital role in overseeing, evaluating, and enhancing the security posture of Danone's cloud infrastructures, which encompass Azure, AWS, GCP, and various SaaS platforms.
• This position ensures that cloud services align with cybersecurity policies, security baselines, and applicable regulatory obligations while facilitating the proactive identification and resolution of cloud security vulnerabilities.
• The analyst will collaborate with teams from Cloud Engineering, Infrastructure, Application Security, Operations, Risk, and Compliance to bolster cloud governance and promote secure cloud integration throughout the organization.

Core Responsibilities:

• Core Responsibilities
• Cloud Security Governance and Compliance
• Assist in the execution of cloud security standards, policies, and controls
• Oversee adherence to cloud security baselines and regulatory standards
• Ensure compliance of cloud environments with security best practices and governance protocols
• Cloud Security Posture Management
• Supervise CSPM dashboards and security posture metrics
• Detect cloud misconfigurations, excessive permissions, exposed resources, and security deficiencies
• Facilitate remediation efforts with cloud platform teams and application owners
• Monitor improvements in security posture and initiatives aimed at risk reduction
• Cloud Risk Evaluation
• Conduct cloud security assessments for both new and existing cloud services
• Identify risks linked to cloud deployments and propose mitigation strategies
• Support cybersecurity evaluations during cloud architecture reviews
• Reporting and Stakeholder Engagement
• Create cloud security dashboards, KPIs, and posture reports
• Offer recommendations for enhancing cloud security maturity
• Collaborate closely with cloud architects, engineers, and business stakeholders
• Continuous Improvement
• Assist in cloud security automation projects
• Promote cloud security awareness and the adoption of best practices
• Keep updated on emerging cloud threats and security technologies
• Essential Skills and Competencies
• Functional and Technical Proficiencies
• Understanding of cloud security fundamentals within Azure, AWS, and/or GCP
• Proficiency in Cloud Security Posture Management (CSPM)
• Expertise in Identity and Access Management (IAM)
• Knowledge of cloud governance and risk management
• Familiarity with security frameworks such as NIST, ISO 27001, and CIS Benchmarks
• Capabilities in cloud security monitoring and reporting

Technical Qualifications:

• Behavioral Competencies
• Analytical thinking
• Strong skills in stakeholder management
• Problem-solving abilities
• Meticulous attention to detail
• Commitment to continuous learning
• Desirable Functional and Technical Skills
• Experience with Microsoft Defender for Cloud
• Familiarity with CSPM solutions like Wiz, Prisma Cloud, Orca, Lacework, or equivalents
• Knowledge of Infrastructure as Code solutions such as Terraform, ARM, and Bicep
• Understanding of cloud container security and Kubernetes security
• Familiarity with GDPR, NIS2, and DORA regulations
• Additional Behavioral Competencies
• Skills in project coordination
• Experience in change management

Preferred Qualifications:

Technology->Infrastructure Security->Cloud Security, Technology->Cloud Security->AWS - GRC, Technology->Cloud Security->Microsoft Azure - Infrastructure Security->Azure Update Management, Foundational->Development Process Generic->SaaS Development Process->SaaS