Manager - Cloud Security Engineering and Operations

The Manager for Cloud Security Engineering and Operations leads the team that secures the firm's public cloud estate. The role owns the cloud security control plane end to end: posture management and guardrails, workload and container protection, identity and entitlement controls, key and secret management, and the logging that makes cloud activity visible to detection teams. It combines people leadership with hands-on technical ownership, setting the standards that engineering teams build against and holding the platform to measurable coverage, drift, and remediation targets across every subscription and account.

What we offer:

• Hybrid working model (2 days in the office and 3 days working remotely)
• Stable employment with an employment contract, private medical care, and a benefits package including MultiSport and a benefits platform
• Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world
• A culture based on teamwork, trust, and knowledge sharing
• A well-structured onboarding program to support a smooth start and successful integration into your new role
• Clear career development paths and access to learning and certification programs
• Access to training platforms and tools that support professional growth
• An inclusive workplace that welcomes people with disabilities
• A modern office in Poznań, located in Malta Office Park

Why join Grant Thornton Global Delivery Center Poland

At Grant Thornton Global Delivery Center Poland (GDC), you’ll contribute to meaningful work that moves businesses forward. From day one, you’ll help deliver value for clients while helping shape the future of a growing delivery center in Poland.

Through supporting operations of our growing multinational platform, you’ll have opportunities to tackle complex projects, work with advanced technologies and develop new skills while expanding your experience. You’ll collaborate across countries, markets and time zones, learning from different perspectives and building experience beyond their roles.

At GDC Poland, you’ll be part of a team that succeeds together. Knowledge is shared, diverse perspectives are valued, and team members support one another in doing their best work.

Clear career paths, learning opportunities and international exposure will help you continue building your skills, expanding your capabilities and growing a rewarding career.

About Grant Thornton

Grant Thornton provides audit and assurance, tax and advisory services through the member firms of the Grant Thornton International Ltd (GTIL) network. Wherever business operates, the network is there, with member firm capabilities in more than 150 markets worldwide.

Within the network, the Grant Thornton Advisors multinational platform is a group of firms that connects priority markets and operates with aligned standards, technology and delivery expectations. For work that crosses borders, this helps support collaboration and coordination across markets. Platform firms operate as separate legal entities.

Zakres obowiązków

• Lead a distributed team of cloud security engineers, including work allocation, on-call coverage, performance feedback, and technical development.
• Own the cloud security platform roadmap across posture management, workload and container protection, and cloud-native detection tooling, from selection through deployment and lifecycle.
• Define and enforce preventive guardrails and secure baselines as code, and drive measured reduction of misconfiguration, drift, and excessive entitlements across all subscriptions and accounts.
• Partner with cloud platform, infrastructure, and application engineering teams to embed security controls into landing zones, pipelines, and infrastructure as code templates.
• Report on cloud control coverage, exception status, and remediation progress to security leadership, and support internal audit, regulatory, and client assurance requests.

Wymagania

Required Qualifications

• Eight or more years in infrastructure or security engineering, including at least two years leading engineers as a manager or team lead.
• Deep hands-on experience securing at least one major public cloud, Microsoft Azure, Amazon Web Services, or Google Cloud Platform, including identity and access management, network controls, and encryption services.
• Practical command of cloud security posture management and workload protection tooling, together with container and Kubernetes security concepts.
• Working experience with infrastructure as code and pipeline automation, using Terraform, Bicep, ARM, CloudFormation, or an equivalent, and with policy as code enforcement.
• Fluency in Polish and English

Preferred Qualifications

• Certification such as Microsoft AZ-500, AWS Certified Security – Specialty, CCSP, or CISSP.
• Experience with multi-cloud environments, cloud detection engineering, and mapping cloud controls to CIS Benchmarks, ISO 27001, or SOC 2.

This role sits within the Information Security Platform Engineering function and shares a common operating model with the wider team. Engineers own the security platforms they build end to end: design, deployment, day-to-day operation, tuning, and lifecycle management. Work is delivered against agreed service levels and measured on control coverage, platform availability, and the quality of detection and prevention outcomes. Because the teams are distributed across LATAM, EMEA, and North America, all roles require reliable overlap with United States business hours and fluent written and spoken English.

• Operate assigned security platforms as a service, including capacity planning, patching, upgrades, health monitoring, and vendor case management.
• Automate repetitive configuration and operational tasks, and treat platform configuration as code wherever the tooling supports it.
• Support incident response and forensic investigations with platform expertise, evidence, and rapid containment actions.
• Maintain runbooks, architecture diagrams, and control documentation to a standard that satisfies internal audit and external assessment.
• Participate in an on-call rotation and in scheduled change windows, including occasional work outside standard business hours.

Tech stack

• Security
• Public cloud
• Microsoft Azure
• Amazon Web Services
• Google Cloud Platform
• Cloud security
• Kubernetes
• Infrastructure as Code
• Terraform
• Bicep
• ARM
• CloudFormation
• Team management
• AWS
• CISSP
• Cloud
• CIS
• ISO