Cyber & IT Security Advisory Principal Specialist

About the role

We are seeking a senior security professional to lead advisory and oversight of AWS cloud architectures, ensuring they are built with security‑by‑design and defense‑in‑depth principles. The role combines strategic governance, hands‑on technical reviews, and cross‑functional collaboration to protect our digital assets and meet regulatory requirements.

Key responsibilities

• Define, implement, and enforce AWS cloud security standards, guardrails, and best practices across accounts, regions, and workloads.
• Conduct security architecture reviews for AWS‑based applications, covering VPC design, IAM models, data protection, and network segmentation.
• Track remediation of cloud security findings and ensure compliance with regulations such as MAS TRM and NIST.
• Collaborate with internal and external teams to assess, monitor, and reduce security risk.
• Manage security project risks, issues, budgets (CAPEX & OPEX), and reporting to governance committees.
• Oversee incident management, mitigation planning, damage assessment, and corrective actions.
• Review vulnerability assessments and penetration testing results to define residual risk and mitigation plans.
• Promote cybersecurity awareness and knowledge across the organisation.

Required profile

• Bachelor’s degree in Computer Science or a related field.
• 6‑10 years of experience in a highly regulated IT security environment, including at least 5 years in threat intelligence, incident response, and VAPT.
• Relevant security certifications (e.g., CISSP, CISA, AWS Certified Security) are preferred.
• Proven ability to lead and implement security solutions across multiple domains.

Required skills

• AWS cloud security and native‑cloud services.
• VPC design, IAM, data protection, and network segmentation.
• TCP/IP protocol suite and OSI Seven‑Layer model.
• Firewall, IDS/IPS, and proxy technologies.
• Threat intelligence, incident response, vulnerability assessment, and penetration testing.
• Knowledge of security standards such as NIST and MAS TRM.