Cloud Security and Encryption Specialist

About the RoleWe are seeking an experienced Cloud Security and Encryption Specialist to support the Ministry of Culture’s cybersecurity operations, with a strong focus on cloud security, security architecture, risk management, and encryption.The role will be responsible for maintaining and strengthening the security posture of cloud environments, identifying and remediating security weaknesses, monitoring cloud security controls, and ensuring compliance with approved cybersecurity policies, standards, and architecture requirements.Key ResponsibilitiesCloud Security OperationsMonitor cloud environments to ensure compliance with approved cloud security policies, standards, and architecture.Continuously assess the security posture of cloud resources, including virtual machines, storage, databases, and platform services.Monitor cloud security tools and dashboards for security alerts, policy violations, suspicious activities, and configuration weaknesses.Investigate cloud security incidents involving unauthorized access, abnormal activities, exposed services, and policy violations.Identify unauthorized cloud resources, deployments, and Shadow IT that may introduce security risks.Review findings from Cloud Security Posture Management (CSPM) tools and coordinate remediation with cloud and infrastructure teams.Monitor third-party cloud integrations and services to ensure compliance with security requirements.Track security observations through remediation and verify that corrective actions are properly implemented and closed.Cloud Security Governance & ArchitectureEnsure cloud environments comply with approved security policies, standards, and architectural requirements.Oversee the organization's cloud security posture across compute, storage, database, and platform services.Assess cloud security risks and ensure appropriate mitigation and remediation activities are completed.Govern the effectiveness of cloud security monitoring and detection capabilities.Support the investigation and response to cloud security incidents in coordination with cybersecurity stakeholders.Maintain visibility and governance over cloud assets to prevent unauthorized deployments and unapproved cloud usage.Oversee cloud security posture assessments and ensure findings are addressed in accordance with organizational risk management practices.Security Architecture & EngineeringApply secure architecture principles across application, cloud, and infrastructure environments.Conduct security architecture and design reviews to identify security risks and control gaps.Apply Zero Trust principles and modern authentication and access-control mechanisms.Conduct threat modeling and security risk assessments for systems and cloud workloads.Provide cybersecurity guidance and recommendations to technical teams and senior management.Develop and maintain high-quality security documentation, technical reports, assessments, and recommendations.Support the implementation of appropriate encryption and security controls across cloud and enterprise environments.Required Qualifications & ExperienceBachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field.Minimum 8 years of experience in enterprise cybersecurity engineering.Strong hands-on experience in cloud, application, and infrastructure security.Proven experience with cloud security monitoring, posture management, and security assessments.Practical experience applying Zero Trust principles.Strong understanding of modern authentication and authorization technologies.Experience conducting threat modeling and security architecture/design reviews.Experience identifying cloud misconfigurations, vulnerabilities, security risks, and compliance gaps.Strong ability to communicate cybersecurity risks and recommendations to technical teams and senior management.Excellent technical documentation and report-writing skills.Preferred CertificationsCertifications in cybersecurity architecture, cloud security, or security engineering are highly desirable, including:CCSP (Certified Cloud Security Professional)CISSPGIAC GCSASABSATOGAFEquivalent recognized cybersecurity or cloud security certifications.Key SkillsCloud SecurityCloud Security Posture Management (CSPM)Security ArchitectureCloud GovernanceInfrastructure SecurityApplication SecurityZero Trust ArchitectureIdentity & Access ManagementThreat ModelingSecurity Monitoring & Incident ResponseSecurity Risk ManagementEncryption & Cryptographic ControlsSecurity ComplianceTechnical Documentation & ReportingIdeal CandidateThe ideal candidate is a senior cybersecurity professional with strong enterprise and cloud security experience, capable of operating across both technical and governance functions. The candidate should be able to identify complex cloud security risks, provide practical remediation guidance, engage with technical and management stakeholders, and ensure that cloud environments remain secure, compliant, and aligned with the organization's cybersecurity architecture.