Senior Microsoft Cloud & Platform Security Lead

Job Description

• Lead the security strategy and technical direction for Microsoft Azure, Microsoft 365, and hybrid cloud platforms.
• Design, implement, and continuously improve security controls across Microsoft Defender, Sentinel, Entra ID, Azure, and Microsoft security services.
• Define and maintain cloud security standards, technical baselines, and governance aligned with CIS, NIST, ISO 27001, and organisational security policies.
• Monitor and improve Microsoft Secure Score and overall cloud security posture through regular assessments and gap analysis.
• Act as the senior escalation point for critical Microsoft platform security incidents, coordinating containment, forensic investigations, and recovery with Security Operations teams
• Provide governance for Azure Key Vault, PKI, GitHub Advanced Security, DevSecOps security controls, Microsoft Copilot security, and Power Automate governance.
• Provide technical leadership, mentoring, and guidance to cloud security engineers and broader cyber security teams
• Evaluate emerging Microsoft security technologies and recommend enhancements to improve resilience, compliance, and operational efficiency.
• Ensure security controls meet regulatory, audit, and enterprise governance requirements while supporting business objectives.

Minimum Requirements

• Bachelor's Degree in Information Technology, Computer Science, Cyber Security, or a related field.
• Minimum 8-10 years' experience in Cyber Security, Cloud Security, or Infrastructure Security.
• At least 5 years' hands-on experience securing Microsoft Azure and Microsoft 365 environments.
• Extensive experience with:
• Microsoft Defender Suite (Endpoint, Office 365, Identity, Cloud Apps)
• Microsoft Sentinel (SIEM/SOAR)
• Microsoft Defender XDR
• Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection, and Privileged Identity Management (PIM)
• Azure Security Centre / Defender for Cloud
• Azure RBAC, NSGs, Security Policies, and Azure Governance
• Microsoft Purview, DLP, and Sensitivity Labels
• Azure Key Vault and PKI Governance
• GitHub Advanced Security and DevSecOps security controls
• Strong understanding of Microsoft Secure Score and cloud security posture management.
• Experience designing enterprise cloud security architectures and governance frameworks.
• Knowledge of security frameworks including NIST, CIS Controls, ISO 27001, and cloud security best practices.
• Experience leading major security incidents, investigations, and remediation activities.
• Excellent stakeholder management, leadership, mentoring, and communication skills