Cloud Security Executive

Responsibilities:
Design, implement, and automate guardrails for secure AWS workloads at scale.
Own preventive and detective controls, harden services, and integrate with SOC for telemetry and response.
Governance and IAM: SCPs, least privilege IAM, Identity Center/SSO, break-glass, and key rotation.
Logging/Detection: Org CloudTrail, centralized log archive, Security Hub, GuardDuty, Access Analyzer, Config rules.
Perimeter: CloudFront + AWS WAF rulesets/bot management; rate limiting, geo/IP policies; integration with Cloudflare (if used).
IaC and Pipelines: Terraform modules, drift detection, pre-commit checks, policy-as-code, and automated remediation.
Workload Hardening: EC2/EKS/ECS/RDS/S3/KMS patterns; secrets management (KMS/Secrets Manager/SSM).
Evidence and Compliance: ISO 27001/27701 DPDP, RBI Outsourcing dashboards, and audit artifacts.
Requirements:
Strong AWS architecture and hands-on security configuration across core services.
Terraform proficiency and Git-based CI/CD; ability to codify guardrails.
SIEM/SOC integrations and detections for cloud events.
Nice-to-Have:
AWS Security Specialty, CCSK, Terraform Associate; exposure to serverless and data lake controls.
Threat modeling, incident support, and blue/purple-team collaboration. KPIs: % compliant resources, mean time to remediate misconfiguration, audit issues closed on time, and drift reduction.

Experience
3-5 yrs