Information Security Officer

Responsibilities

• Drive efforts to prevent, monitor, and respond to information security breaches and cyber-attacks.
• Identify opportunities to automate and standardize information security controls for supported groups.
• Resolve vulnerabilities detected in applications or infrastructure and analyze source code to mitigate weaknesses.
• Review and validate automated testing results and prioritize actions based on overall risk.
• Collaborate with IT to ensure system architecture follows corporate policies and security best practices.
• Perform information security risk assessments and identify application compensating controls for non-compliant items.
• Provide technical leadership for the development of secure components and overall systems design.

Requirements

• At least 2 years of experience securing cloud environments, specifically AWS and GCP.
• Strong understanding of cloud security architectures (e.g., AWS Well-Architected Framework, Google Cloud Security Command Centre).
• In-depth knowledge of cloud infrastructure including VPC, EC2, S3, Cloud Storage, and Compute Engine.
• Knowledge of Identity and Access Management (IAM) security models for AWS and GCP.
• Familiarity with compliance and risk frameworks such as NIST, ISO 27001, and CSA STAR.
• Experience with Infrastructure as Code (IaC) security using Terraform or CloudFormation.
• Bachelor's degree in Computer Science, Cybersecurity, or equivalent work experience.
• Excellent communication skills with the ability to articulate technical solutions in high-stress situations.

Preferred Qualifications

• Industry certifications such as CISSP, CISM, or CCSP.
• Public Cloud Solution Architect or Security Certifications (e.g., AWS Certified Solutions Architect, GCP Professional Cloud Security Engineer).

About the Company

Deloitte is a leading global provider of audit and assurance, consulting, financial advisory, risk advisory, tax, and legal services.