Sr Cloud Security Analyst

Position Overview: Senior Cloud Security Analyst

The Senior Cloud Security Analyst serves as both a strategic advisor and a hands-on technical expert, responsible for evaluating, enhancing, and maintaining the cloud security posture across multiple brands and environments. This role acts as a critical link between technical and business units, providing security insight, identifying risks and gaps, and driving initiatives that ensure the secure operation of cloud-based infrastructure.

The analyst will be instrumental in supporting access and identity management (IAM) processes—though not serving as the primary IAM lead—while actively monitoring digital ecosystems to identify and mitigate potential threats. The role requires deep expertise in cloud platforms, particularly Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP), along with a strong understanding of security operations, compliance requirements, and regulatory frameworks such as GDPR, PCI DSS, and NIST.

The ideal candidate is a collaborative and analytical thinker with strong communication skills and a demonstrated ability to influence and execute security initiatives in complex enterprise environments.

Key Responsibilities:

• Evaluate and improve cloud security measures across Azure, AWS, and GCP environments.

• Serve as a security consultant to various business and technology teams, identifying vulnerabilities and recommending strategic solutions.

• Support Identity and Access Management (IAM) operations, including access reviews, policy enforcement, and integration, particularly using SailPoint.

• Monitor cloud environments and infrastructure to detect, respond to, and mitigate security risks or unauthorized access.

• Configure and manage access controls, roles, and permissions for cloud environments.

• Work with compliance and risk teams to ensure adherence to regulatory standards including GDPR, PCI DSS, and NIST.

• Develop and maintain PowerShell scripts to automate administrative and security tasks.

• Collaborate across teams to ensure secure design and implementation of new applications and cloud-based services.

• Contribute to the ongoing maturity and alignment of security best practices across platforms.

Required Experience and Skills:

• Extensive hands-on experience in Azure administration, including configuration and policy enforcement.

• Proven expertise in AWS cloud security administration, managing tenant security, access control, and monitoring.

• Working knowledge of GCP environments and associated security practices.

• Strong scripting ability, particularly with PowerShell, for automation and administration tasks.

• Experience with Orca Security for cloud risk assessment and visibility.

• Proficient in managing user and group permissions within Active Directory.

• Solid understanding and administration of Windows workstations and server operating systems.

• Experience with SailPoint IAM solutions for identity lifecycle management and access governance.

• Familiarity with endpoint security tools such as Qualys for vulnerability management.

• Knowledge of relevant compliance and cybersecurity frameworks such as GDPR, PCI DSS, and NIST.

Preferred Qualifications:

• Professional certifications such as Microsoft 365 Security Administrator, CompTIA Cloud+, or equivalent.

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related technical field.

• Demonstrated ability to own and drive strategic security initiatives from concept to execution.

• Proven success working effectively within team-oriented, cross-functional, and fast-paced environments.