IT&Data Cloud Security Posture Analyst

Role Summary

The IT&Data Cloud Security Posture Analyst is responsible for monitoring, assessing, and improving the security posture of Danone's cloud environments across Azure, AWS, GCP, and SaaS platforms. The role ensures cloud services comply with cybersecurity policies, security baselines, and regulatory requirements while supporting proactive identification and remediation of cloud security risks.

The position collaborates with Cloud Engineering, Infrastructure, Application, Security Operations, Risk, and Compliance teams to strengthen cloud governance and ensure secure cloud adoption across the organization.

Responsibilities

Key Responsibilities

Cloud Security Governance & Compliance

• Support implementation of cloud security standards, policies, and controls.
• Monitor compliance with cloud security baselines and regulatory requirements.
• Ensure cloud environments adhere to security best practices and governance standards.

Cloud Security Posture Management

• Monitor CSPM dashboards and security posture indicators.
• Identify cloud misconfigurations, excessive permissions, exposed resources, and security gaps.
• Support remediation activities with cloud platform teams and application owners.
• Track security posture improvements and risk reduction initiatives.

Cloud Risk Assessment

• Perform cloud security assessments for new and existing cloud services.
• Identify risks associated with cloud deployments and recommend mitigation actions.
• Support cloud architecture reviews from a cybersecurity perspective.

Reporting & Stakeholder Management

• Develop cloud security dashboards, KPIs, and posture reports.
• Provide recommendations for improving cloud security maturity.
• Work closely with cloud architects, engineers, and business stakeholders.

Continuous Improvement

• Support cloud security automation initiatives.
• Contribute to cloud security awareness and best-practice adoption.
• Stay informed about emerging cloud threats and security technologies.

Required Skills & Competencies

Functional & Technical Skills

• Cloud security fundamentals (Azure, AWS, and/or GCP).
• Cloud Security Posture Management (CSPM).
• Identity and Access Management (IAM).
• Cloud governance and risk management.
• Knowledge of security frameworks (NIST, ISO 27001, CIS Benchmarks).
• Cloud security monitoring and reporting capabilities.

Technical requirements

Behavioral Competencies

• Analytical mindset.
• Strong stakeholder management skills.
• Problem-solving capabilities.
• Attention to detail.
• Continuous learning attitude.

Good to Have Functional & Technical Skills

• Microsoft Defender for Cloud.
• Wiz, Prisma Cloud, Orca, Lacework, or equivalent CSPM solutions.
• Infrastructure as Code (Terraform, ARM, Bicep).
• Cloud container security and Kubernetes security.
• Knowledge of GDPR, NIS2, and DORA requirements.

Behavioral Competencies

• Project coordination skills.
• Change management experience.

Preferred skills

Technology->Infrastructure Security->Cloud Security,Technology->Cloud Security->AWS - GRC,Technology->Cloud Security->Microsoft Azure - Infrastructure security->Azure Update Management,Foundational->Development process generic->SaaS Development Process->SaaS

Education

MCA,Intergrated course BCA+MCA,Bachelor of Engineering,BCA,BSc