Manager - Cloud Information & Information Security

Key Responsibilities

1. Cloud Infrastructure Management

• Manage, administer, and monitor the AWS cloud infrastructure.

• Work extensively with AWS services including EC2, VPC, Route 53, RDS, S3, IAM, CloudWatch, CloudTrail, WAF, KMS, ACM, Cognito, and AWS Backup.

• Ensure high availability, performance, scalability, and reliability of cloud-hosted systems and applications.

2. Information Security Operations

• Implement and maintain robust security controls across cloud infrastructure and applications.

• Manage IAM, MFA, vulnerability management, security patching, and system hardening.

• Continuously strengthen the organization's cloud security posture.

3. Security Monitoring & Incident Management

• Monitor security events using SIEM and EDR solutions.

• Review and analyze security alerts and coordinate investigations.

• Ensure timely resolution of security incidents and implementation of corrective and preventive actions.

4. Vendor & Team Coordination

• Act as the primary point of contact for cloud infrastructure and information security vendors.

• Monitor SLAs and deliverables and ensure timely closure of issues.

• Coordinate with internal teams and external partners to ensure smooth and efficient operations.

5. Compliance & Audit Support

• Support internal and external audits related to IT infrastructure and information security.

• Maintain necessary policies, procedures, records, and supporting documentation.

• Ensure policy compliance and track the timely closure of audit observations and security findings.

6. Backup, Disaster Recovery & Business Continuity

• Oversee backup operations and ensure the recoverability of critical systems.

• Coordinate and support Disaster Recovery (DR) testing.

• Maintain DR documentation and support business continuity requirements.

7. Continuous Improvement

• Identify opportunities for automation, cloud cost optimization, enhanced monitoring, and operational efficiency.

• Recommend improvements in cloud infrastructure, security controls, and operational processes.