Technology Consulting-DT CloudSec-Strategy Assistant Manager

We are looking for a highly skilled and dynamic Assistant Manager to join our Technology Consulting - DT CloudSec - Strategy and Risk Management team. In this role, you will assist clients in navigating the complexities of cloud security by providing strategic advice on risk management, security governance, and the development of robust cloud security strategies. As a key member of the team, you will play a pivotal role in identifying security risks, implementing proactive measures to mitigate those risks, and helping clients establish secure cloud environments that are resilient, compliant, and aligned with business goals.

Key Responsibilities:

• Cloud Security Strategy Development: Collaborate with clients to design and implement cloud security strategies tailored to their business needs. Guide clients in the adoption of cloud security frameworks, ensuring alignment with industry best practices, business objectives, and regulatory requirements.

• Risk Management & Assessment: Lead risk management activities by identifying, assessing, and prioritizing security risks within cloud environments. Conduct cloud security risk assessments, vulnerability assessments, and threat modeling exercises to develop actionable mitigation strategies.

• Security Governance & Compliance: Assist clients in developing and implementing cloud security governance models. Ensure clients meet regulatory and compliance requirements such as GDPR, HIPAA, SOC 2, and others by developing and implementing security controls across cloud platforms (AWS, Azure, GCP).

• Cloud Security Frameworks: Develop and guide the implementation of cloud security frameworks (e.g., NIST, CIS, ISO 27001) to ensure that cloud environments are secure, resilient, and compliant. Ensure that security policies, controls, and best practices are consistently followed throughout the cloud lifecycle.

• Cloud Security Risk Mitigation: Help clients identify security gaps within their cloud environments and recommend risk mitigation strategies. Proactively advise clients on securing their cloud infrastructure, applications, and data to prevent potential breaches, data loss, and other security incidents.

• Incident Response & Recovery Plans: Assist clients in developing cloud-specific incident response plans and disaster recovery strategies. Ensure that clients are prepared for potential security incidents, minimizing the impact on operations and ensuring rapid recovery.

• Cloud Security Maturity Assessment: Conduct assessments of clients' cloud security maturity levels, identify areas for improvement, and recommend solutions to strengthen their overall security posture.

• Stakeholder Communication: Effectively communicate complex security concepts to technical and non-technical stakeholders. Provide clear, concise, and actionable reports that inform senior leadership on cloud security risks, mitigations, and strategies.

• Cloud Security Trends & Innovation: Stay updated on the latest cloud security trends, technologies, and emerging risks. Share knowledge with clients and internal teams, recommending new security tools, strategies, or improvements to ensure continuous enhancement of cloud security practices.

• Team Collaboration & Mentorship: Collaborate with cross-functional teams, including cloud architects, security engineers, and business stakeholders, to implement comprehensive cloud security solutions. Provide mentorship and guidance to junior team members, helping them grow professionally and enhance their cloud security expertise.

Qualifications:

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5+ years of experience in cloud security, IT security, risk management, or technology consulting, with a proven track record of advising clients on cloud security strategies, risk assessments, and governance.
• Strong knowledge of cloud security principles and platforms (e.g., AWS, Azure, Google Cloud) with hands-on experience in security services such as IAM, encryption, network security, and threat detection.
• In-depth understanding of cloud security frameworks , risk management methodologies, and compliance standards (e.g., NIST, ISO 27001, SOC 2, GDPR).
• Experience conducting cloud security risk assessments , vulnerability assessments , and threat modeling exercises.
• Proven experience in security governance , policy creation, and ensuring adherence to security best practices and regulatory requirements across cloud environments.
• Strong understanding of cloud migration , security challenges in cloud-native architectures, and securing applications in public and hybrid cloud environments.
• Knowledge of DevSecOps practices and the integration of security into DevOps pipelines.
• Excellent communication skills , with the ability to present complex security concepts and risk analyses to both technical and business stakeholders.
• Ability to work independently and collaboratively within a fast-paced, client-facing consulting environment.

Preferred Skills:

• Certifications such as Certified Cloud Security Professional (CCSP) , AWS Certified Security Specialty , Microsoft Certified: Azure Security Engineer , Certified Information Systems Security Professional (CISSP) , or Certified Information Security Manager (CISM) .
• Experience with cloud security tools such as AWS Security Hub, Azure Security Center, Prisma Cloud, or similar.
• Knowledge of security automation and Infrastructure as Code (IaC) principles for cloud environments.
• Familiarity with container security , Kubernetes , and securing cloud-native applications.
• Hands-on experience with incident response , disaster recovery , and business continuity planning in the cloud.

Soft Skills:

• Strong analytical skills , with the ability to assess and prioritize security risks based on business impact.
• Problem-solving mindset , with the ability to find innovative solutions to complex cloud security challenges.
• Client-focused approach , with the ability to build and maintain strong relationships with stakeholders and communicate effectively at all levels of an organization.
• Team leadership and the ability to guide and mentor junior staff members, while fostering collaboration across teams.