B

Senior Vice President, Network and Cloud Security Engineer

BNY · Mumbai, Maharashtra, India

15–25 yrs experiencefull_timePosted 1w ago
Apply now →

Job description

**Job Description** We’re seeking a future team member for the role of Senior Vice President to join our Information Security team. This role is located in Pune. In this role, you’ll make an impact in the following ways: - Be part of a team focused on strengthening enterprise cloud security capabilities across public cloud and cloud-native environments. - Contribute to the implementation of secure cloud design patterns, technical standards, and control requirements. - Partner closely with cloud engineering, DevSecOps, IAM, platform teams, and cyber stakeholders. - Gain experience across cloud security engineering, automation, posture management, and governance support. - Help translate cloud security requirements into practical technical controls and repeatable implementation patterns. - Support cloud security strategy and governance through engineering execution, control adoption, and reporting inputs. - Lead the engineering, implementation, and continuous improvement of cloud security controls for identity and access management, network security, encryption, key management, secrets management, logging, monitoring, and workload protection in AWS, Azure, or GCP. - Act as an AI enabler for cloud security by identifying, assessing, and promoting AI use cases that improve security outcomes. - Support the adoption of AI-driven capabilities for threat detection, risk analysis, automation, incident response, and security operations. - Translate security and control requirements into repeatable engineering solutions and implementation standards. - Support the design and implementation of technical controls aligned to NIST SP 800-53 and related enterprise security requirements. - Lead implementation efforts for container, Kubernetes, API, and cloud-native workload security controls. - Drive the operational maturity of Cloud Security Posture Management (CSPM) capabilities to identify misconfigurations, policy violations, excessive permissions, exposed assets, and control drift. - Partner with engineering and cyber teams to optimize Wiz and similar CSPM/CNAPP platforms, including workflow integration, prioritization, remediation support, and reporting. - Design and strengthen the use of cloud-native posture and policy services, including AWS Config, AWS Security Hub, AWS Organizations SCPs, Azure Policy, Microsoft Defender for Cloud, GCP Organization Policy, and Security Command Center. - Define and implement policy-as-code, automated guardrails, and infrastructure-as-code patterns to improve control consistency and reduce manual processes. - Provide senior technical guidance to cloud engineers, DevSecOps practitioners, and application teams on secure cloud implementation practices. - Partner with cloud architects and governance stakeholders to improve standards adoption, exception handling, and control coverage. - Help define cloud security metrics, remediation priorities, and technical reporting that support governance and risk management objectives. - Contribute to audit, regulatory, and control review activities by explaining technical implementations, evidence, and remediation status. - Maintain and improve documentation for cloud security standards, design patterns, engineering procedures, and operating guidance. To be successful in this role, we’re seeking the following: - 18+years of experience in cloud security engineering, security engineering, DevSecOps, infrastructure security, or a related security engineering role. - Strong hands-on experience securing workloads and services in AWS, Azure, or GCP. - Strong knowledge of cloud security principles across IAM, networking, encryption, secrets management, logging, workload protection, resilience, and secure service consumption. - AI enabler for cloud security by identifying, assessing, and promoting AI use cases that improve security outcomes. - Experience with security automation, orchestration, analytics, and AI-driven security tooling. - Experience implementing cloud security controls at scale in enterprise or regulated environments. - Strong familiarity with NIST SP 800-53, MCSB and related control concepts, especially in areas such as: Access Control (AC), Audit and Accountability (AU), Configuration Management (CM), Identification and Authentication (IA), Incident Response (IR), Risk Assessment (RA), System and Communications Protection (SC), System and Information Integrity (SI) - Strong understanding of Cloud Security Posture Management (CSPM) concepts, including continuous compliance monitoring, misconfiguration detection, exposure analysis, and governance workflows. - Experience with CSPM/CNAPP tools such as Wiz, Prisma Cloud, Orca, Lacework, or similar platforms. - Experience with cloud-native policy and posture tools, such as: AWS Config , AWS Security Hub , AWS Organizations SCPs , Azure Policy , Microsoft Defender for Cloud , GCP Organization Policy , Google Security Command Center - Experience developing or supporting policy-as-code and automated guardrails using tools such as OPA/Rego or equivalent policy frameworks. - Strong experience with Infrastructure as Code and automation using Terraform, CloudFormation, ARM, Bicep, Python, or similar tooling. - Experience with container and Kubernetes security, API security, vulnerability management, and cloud-native control implementation. - Experience supporting or contributing to cloud security strategy, governance processes, standards, exception handling, remediation tracking, and risk reporting. - Strong technical judgment, problem-solving ability, and cross-functional collaboration skills. - Strong written and verbal communication skills, including the ability to explain technical controls in business and risk terms. - Bachelor's degree in computer science, engineering, cybersecurity, or related discipline, or equivalent practical experience. - Experience in a regulated industry such as financial services. - Familiarity with CIS Benchmarks, CSA CCM, OWASP,