GCP lead platform sec

Principal responsibilities

The principal accountabilities of the Lead Platform Cloud Security Architect GCP are to:

• Identify, deliver, and document the required artifacts to enable movement of applications and data to the cloud securely. This includes understanding security requirements, cloud services and products awareness, solution architecture design and review and working with the cybersecurity organization to streamline governance.
• Hands-on, direct interaction with the engineering and application development teams and providing leadership to drive alignment on security requirements, influence decision makers, build relationships, and communicate strategy and architecture to the broader internal community. Be able to influence and work collaboratively to guide the developers, engineers and architects to deliver applications into the cloud securely and using reusable patterns.
• Provide a detailed understanding of cloud security and cloud infrastructure services, threat landscape and attack scenarios and risks.
• Possess significant breadth across other disciplines (e.g., enterprise security architecture, compute services, storage, large-scale networking, virtualization, data centre, integration architecture (API), orchestration technologies (Kubernetes, Docker, open stack), systems resiliency, service support, Secure application development lifecycle management (DevSecOps), and service delivery.
• Assist in preparation of high-level as well as detailed solution design documents.
• Assess the security posture of proposed solutions.
• Undertake cloud service (e.g. BigQuery) security risk assessments, identifying potential vulnerabilities and threat scenarios and defining and documenting relevant technical controls to mitigate those threats (in HSBC the "Cloud Security Baselines").
• Work on aligning strategic tooling with the necessary security controls.
  

* Proficiency in Security for Cloud particularly for Google Cloud Platform
* Excellent command of Cybersecurity organization practices, risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies
* Understanding of Privileged Access Management and Identity Management on Cloud.
* Experience in working on various Cloud Platforms (Azure, GCP, AWS, Ali) is a plus.
* Ability to produce hardened configuration standards for cloud services.
* Threat modelling experience.
* Understanding of software vulnerabilities and vulnerability remediation.
* Experience with cloud Infrastructure build tooling such as Terraform or Ansible.
* A proven track record working within an enterprise scale organisation
* Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity
* Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements or remediation
* Dev-ops and application security & data security experience
* Solution architecture skills.
* Experience of working in an agile environment.