Azure Cloud Security Lead

This senior role leads cloud security assessments and governance across a large Microsoft Azure estate, spanning multiple tenants, subscriptions and connected SaaS and PaaS platforms. You will shape security controls and guardrails for new application onboarding, define Azure security policies, and drive identity and privileged access governance. You will also provide cloud security inputs to the development of an Agentic AI platform used to automate and augment assessments.

Our client is a leading global professional services firm delivering assurance, consulting and advisory services to organisations across the world. They operate at significant scale, serving a broad range of industries with a strong emphasis on technology-led transformation. The culture encourages continuous learning, collaboration across geographies, and responsible use of emerging technology.

Responsibilities

• Lead cloud security assessments using an Agentic AI platform and provide cloud security domain inputs for its development and enhancement
• Design, implement and enforce security controls and guardrails for new application and platform onboarding to Azure
• Design and maintain Azure security policies across tenants and subscriptions
• Conduct cloud security reviews of applications hosted in independent Azure tenants
• Coordinate Azure resource tag correction across 500+ subscription owners and maintain tagging governance
• Monitor Azure cost governance for information security resources and optimise cloud security spend
• Administer Privileged Identity Management (PIM) and architect Conditional Access policies across the Azure environment
• Perform SaaS and PaaS security reviews and compliance monitoring across all connected applications and cloud platforms

Requirements

• 12-15 years of overall experience, with deep hands-on expertise in Azure security
• Proven experience conducting cloud security assessments and reviews in enterprise environments
• Strong working knowledge of Azure security policies, Conditional Access and Privileged Identity Management
• Experience with SaaS and PaaS security reviews and cloud security controls and guardrails
• Familiarity with Azure cost governance and resource tagging governance practices
• Ability to stakeholder-manage and coordinate across large numbers of subscription owners
• Exposure to or interest in Agentic AI platforms and their application to security operations
• Relevant certifications in cloud security or Azure administration are preferred

Skills

Azure security, Cloud security assessments, Azure security policies, Conditional Access, Privileged Identity Management (PIM), SaaS/PaaS security reviews, Cloud security controls and guardrails, Azure cost governance, Azure resource tagging governance, Agentic AI platform