Security Cloud Expert 3035

Job description

About the Job Governance & Security Expertise(GSE) area of Allianz Technology CISO sets and governs various information security capabilities across the enterprise. The organization is responsible for strengthening Allianz's cybersecurity posture through effective controls, governance, security engineering capabilities, and risk transparency. As a Security Cloud Expert , you will play a key role in shaping and strengthening the security of Allianz Technology’s cloud environments and third-party SaaS solutions. You will combine cloud security architecture expertise with effective governance, translating security requirements into practical blueprints, guardrails and technical measures.Working closely with cloud platform, security architecture, operational security and governance stakeholders, you will guide secure cloud adoption, assess security risks and drive improvements that make cloud security scalable, consistent and practical. What you do Define and continuously improve cloud security blueprints, guardrails and reusable architecture patterns for cloud platforms and third-party SaaS solutions. Translate Industry best practices, Group and customer security requirements, policies and applicable regulatory requirements into actionable technical controls and implementation guidance. Review cloud and SaaS architectures, platform designs and service integrations, providing security guidance throughout their lifecycle. Advise platform and service teams on secure configuration, identity and access management, network security, data protection, logging and workload protection. Assess the security of third-party SaaS solutions, including access controls, data handling, integration risks and shared security responsibilities. Analyse cloud security posture findings, including misconfigurations, identity risks and exposure scenarios, and guide remediation based on risk and business impact. Assess cloud security risks and policy deviations, recommend mitigating measures and track agreed actions with accountable platform, service and risk owners. Contribute to cloud security policies, standards and guidelines, including security requirements for third-party cloud and SaaS providers. Promote security automation and the integration of preventive and detective controls into cloud provisioning, Infrastructure-as-Code and delivery pipelines. Provide transparency on cloud security posture, control adoption and remediation progress, working with operational security teams to incorporate lessons from incidents and vulnerabilities into architecture and governance improvements. What you bring University degree in Computer Science, Information Security or equivalent professional experience. At least five years of experience in information security, cloud security, security architecture or related technical fields, including experience driving security improvements in complex technology environments. Hands-on experience securing cloud environments in Azure, AWS and/or GCP, with strong expertise in at least one major cloud platform. Strong understanding of cloud architectures and shared responsibility models, including identity and access management, networking, encryption, key management, logging and workload protection. Experience developing or reviewing security architectures, blueprints, guardrails and reusable implementation patterns. Experience assessing the security of third-party SaaS solutions, including identity federation, access controls, data protection and enterprise integrations. Experience with cloud security posture management and CNAPP/CSPM capabilities, including the analysis and prioritisation of misconfigurations, identity risks and exposure paths. Ability to translate security policies, risk assessments and governance requirements into practical technical measures and clear remediation guidance. Familiarity with Infrastructure-as-Code, CI/CD pipelines and automated security controls, including their application to secure cloud provisioning. Strong analytical and problem-solving skills, with the ability to balance security requirements, business needs and operational feasibility. Excellent communication and stakeholder management skills. Proficient English with excellent written and verbal communication skills.Advanced knowledge of AI technologies and their practical application. Relevant cloud security or security architecture certifications are an advantage. What we offer We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad. We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location). From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered. Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach. 109842 | IT & Tech Engineering | Professional | Non-Executive | Allianz Technology | Full-Time | Permanent Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust. We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. Join us . Let's care for tomorrow.