CLOUD & DATA SECURITY

Job Summary:

We are seeking a skilled and detail-oriented Data Security Specialist with expertise in cloud and data security to help protect our organization’s sensitive information and cloud-based assets. The ideal candidate will be responsible for designing, implementing, and managing data protection strategies that ensure the confidentiality, integrity, and availability of data across cloud platforms and on-premise systems.

Key Responsibilities:

Design and implement data security controls across public, private, and hybrid cloud environments (e.g., AWS, Azure, GCP).

Monitor and secure data in transit and at rest, ensuring compliance with regulatory and industry standards (e.g., GDPR, HIPAA, CCPA, ISO 27001).

Evaluate and deploy Data Loss Prevention (DLP), Cloud Access Security Brokers (CASB), encryption, tokenization, and rights management tools.

Conduct risk assessments and security audits related to cloud and data infrastructure.

Collaborate with DevOps, IT, and Security teams to integrate secure practices into CI/CD pipelines.

Develop and maintain data classification frameworks and retention policies.

Lead incident response activities for data breaches and coordinate forensic investigations when required.

Provide recommendations for improving data security architecture and reducing the attack surface.

Support security awareness and training programs related to data handling and cloud security best practices.

Maintain detailed documentation on data protection policies, procedures, and incidents.

Qualifications:

Education:

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.

Relevant certifications preferred: CISSP, CISA, CCSP, Azure Security Engineer, AWS Security Specialty, etc.

Experience:

3–7 years of hands-on experience in data security, cloud security, or a related role.

Strong knowledge of cloud platforms (AWS, Azure, GCP) and associated security services.

Proficient in encryption standards, key management, DLP tools, and IAM best practices.

Familiarity with data privacy regulations and compliance requirements.

Experience with SIEM, SOAR, and threat detection tools is a plus