Cloud Security Consultant

**Cloud Security Consultant**:
**JOB SUMMARY**

Cloud Security Consultant shall be, responsible for ensuring the information security compliance requirements for the bank wide digital implementations.

It includes:

- To work on Bank’s Digital and Cloud Security Framework
- Review Security Architecture around implementation of API as micro services, Digital components using

Cloud functions For the Cloud workloads, Perform Cloud Security Assessments as per AWS, Azure Security Standards of the company.
- Ensure continuous security compliance for developments over the CI-CD pipeline
- Other various financial standards and Security best practices.

And by contributing to various technical development projects and maintaining a robust security assurance program.

**ROLES AND RESPONSIBILITIES**
- Develop and maintain Cloud Security Controls framework and Code repository security standard
- Develop Pipelines related Standards and baselines for tools like Jenkins.
- Develop, Maintain & Review against Standards for Devops Code development and reviews.
- Develop, Maintain & Review against Standards for Micro services and API’s
- Develop, Maintain & Review against Kubernetes Security standard
- Develop, Maintain & Review against Standards for Infrastructure as code and Configuration management.
- Review against Standards for Standards for Cloud security Azure and AWS
- Review against Standards for Standards for Block chain, RPA, AI
- Review Security Architecture around implementation of API as micro services using Cloud functions, and digital componets likeSpring Boot, NodeJS, Docker, Kubernetes and NoSql databases like mongoDB, MySQL, Redis, Elastic, Logstash, Kibana, Grafana, Prometheus, RabbitMQ, Jenkins, TeamCity, GitHub
- Help ensure relevant test coverage and appropriate sampling;
- Participate as an integral part of the team, exhibiting ownership, follow through, initiative, awareness and effective communication with peers and management
- Continually learn, actively share knowledge and foster exchange of skills;
- Proactively identify opportunities to improve the quality of reporting and usability of that information;
- Contribute to newsletters, whitepapers and other written communication as needed;
- Exhaustively review reports provided by assessors to their clients and work closely with these security

vendors to resolve issues
- Perform ad hoc projects as required;
- Be willing to participate in mínimal travel;
- Other duties as assigned.

**KEY ACCOUNTABILITIES**
- Build and manage security standards and requirements in Digital and Cloud implementations
- Manage Security Compliance requirements for HO and respective International location for digital projects
- Controls / reviews of individual component of the CI/CD pipeline, contributing in an agile fashion
- Highlight security status & concerns to management
- Consult with IT and information security staff to ensure that implementation plan is established for GAPS identified in any TRA, Digital Security Assessments
- Review and provide recommendations to IS policies, standards, guidelines/ processes with respect to Digital Implementations
- Track and report Security Gaps periodically
- Track open Audit issues on information security related to Digital Projects
- Digital components integration with existing Security tools and processess.
- Regulatory mandates on the Digital components.

**ELIGIBLE CANDIDATE PROFILES**
- Bachelor (or) Masters in Engineering/Technology (or) Master in Science graduates with 8+ years of experience in information security / Digital Security/ Digital Technology
- Well versed with Enterprise Architecture, SOA, Application Security, Micro services
- Understanding of information systems and networking diagrams
- Experience of Enterprise level API and integrations Roadmap and driving end-to-end implementation & success of SOA initiatives including technical architecture, installations, requirement analysis, design preparation, support to development team, standards implementation and review
- Experience evaluating the security infrastructure for large enterprise merchants or service providers;
- Working knowledge of the financial industry is desirable
- Technical understanding of Big Data technologies such as HDFS, Map Reduce, Oozie, YARN, Hive, Pig, Sqoop and Ambari etc
- Working experience with Cloud Components on Azure and AWS
- Working knowledge of audit methodologies and security assessment tools;
- Methodical and organized; able to manage multiple opportunities, projects, and partners concurrently;
- Excellent written and oral communication skills, can express thoughts clearly, knows how to listen and is able to contribute in a team environment;
- Able to multi-task and work independently with minimum supervision to meet firm deadlines;
- Flexible, proactive, quick to learn and possessing a can-do attitude;
- A blend of curiosity, creativity, persistence, commitment, passion and optimism