Director of Security and Compliance safeguarding digital assets and data with a focus on cybersecurity and compliance. Leading risk management, stakeholder engagement, and team leadership initiatives.
About the role
- Cloud Security Engineer at Tricentis supports security operations across AWS and Azure environments while collaborating on improvements to cloud infrastructure.
Responsibilities
- Design, implement, and manage preventive controls, detective measures and automation, validating secure implementation in our AWS and Azure environments
- Design, implement, and manage preventive controls, detective measures and automation, validating secure implementation in our Business Applications and 3rd Party SaaS tools
- Identify opportunities for automating security controls and help develop sustainable solutions
- Partner with other teams and drive security-focused improvements to our cloud infrastructure
- Assess our cloud environments for security issues and lead remediation efforts
- Lead and assist in incident response efforts
- Collaborate with other teams to provide security guidance and expertise
- Advocate best practices to promote a proactive and collaborative security culture
Requirements
- 3+ years of relevant experience in information security
- Strong knowledge of network/system attack methods and mitigation techniques
- Strong analytical and troubleshooting skills
- The ability to articulate security concepts to both technical and non-technical audiences
- A high level of integrity and a moral compass
- Experience with security automation
- Experience with incident response
- Experience with configuring Log Management/SIEM tools
- Experience with configuring and deploying EDR, Antivirus, and security tools
- Experience with security in DevOps environments (secrets management, CI/CD pipeline integration, secure IaC, container security, etc.)
- Experience in threat detection, monitoring, hunting, and forensics
- Experience with configuring and securing AWS or Azure cloud environments
- Experience with Docker, Kubernetes, Cloud Services, and Infrastructure as Code
- Experience with regulatory compliance frameworks and standards
Benefits
- training, certifications, conference attendance
- support participation in industry groups
- speaking at events
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Information Security Risk & Compliance Analyst supporting the maintenance of ISO 27001 standards. Contributing to risk assessments and compliance across AAB’s Business Protection Team.
Information Security Risk & Compliance Analyst at AAB managing compliance with ISO 27001, supporting enterprise risk assessments and enhancing information security systems.
Information Security Risk & Compliance Analyst at AAB focusing on ISO 27001 compliance and information security management. Collaborating across teams to ensure robust risk and compliance frameworks.
Security Principal at Optiv designing AI security solutions for clients, leveraging advanced security services and technologies. Driving pipeline generation and maintaining strong client relationships as a trusted advisor.
Cloud Security Architect supporting federal customer projects focused on architecture and security solutions. Conducting risk assessments and defining security requirements within a cloud environment.
Information Security Specialist responsible for enhancing cybersecurity posture through incident management and compliance. Collaborating with cross - functional teams to monitor threats and implement security measures.
Senior Lead Info Security Architect leading and collaborating on cybersecurity solutions at TIAA. Responsible for secure design and implementation of cloud security strategies and practices.
Part Time Security Officer providing protection for Collector's personnel and assets at trade shows across North America while reporting to Security Shows & Transportation Manager.
Enterprise Security Architect at PBCN GmbH designing and implementing security architectures. Collaborating with teams to ensure application security and conducting risk assessments.