Apply now »

Risk Advisory | Cyber Risk - Cloud Security (Consultant - Senior Consultant)

Date:  9 Apr 2024
Service Line / Portfolios:  Cyber & Strategic Risk
Location: 

Bangkok, TH

Are you ready to unleash your potential?

 

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve. 

 

We believe we have a responsibility to be a force for good, and WorldImpact  is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices. 

 

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals. 

 

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions.

 

Ready to unleash your potential with us? Join the winning team now!

 

Work you’ll do

As a Cloud Security Consultant, you will be at the front lines with our clients supporting them with their Cloud security needs specifically helping them navigate the journey to the cloud on leading platform such as AWS, GCP and Azure.

 

Depending on your experience and interests, we have a wide range of areas and challenges for you covering all aspects of securing the public cloud, including


Responsibilities:

 

  • Conducting cloud security analysis, recommendations and configurations of prospective clients' cloud platforms and environments based on Deloitte's Cloud Cyber Risk Framework and other industry leading practices.
  • Assisting clients with configuration and delivery of cloud security and compliance reports.
  • Designing and developing cloud-specific security policies, standards, and procedures e.g., tenant, management group and subscription management and configuration, identify management and access control, firewall management, auditing and monitoring, security incident and event management, data protection (DLP, encryption), user and administrator account management, SSO, conditional access controls and password/key management.
  • Define and develop secure cloud architecture frameworks / security reference architectures for public and hybrid cloud models, including IaaS, PaaS or other cloud services.
  • Secure Design and implementation of different CSP (AWS/Azure/GCP) services/applications required as part of cloud solutioning for large enterprise solutions (e.g. Identity management, Data Analytics etc).
  • Implement Infrastructure-as-Code (IaC) on AWS, Azure or GCP with a focus on (but not limited to) security.
  • Security engineering of DevSecOps solutions on cloud e.g. secure integration of IAC best practices and IAC security tools,
  • Conducting cloud security analysis, recommendations, and configurations for clients for SaaS platforms like M365 platform.
 

Requirements:

  • Must have : Passion and interest in working on cutting edge areas of Cloud technology in areas like assessments, design, solutioning, implementation, monitoring etc.
  • Preferably 3+ years of IT experience with 1+ year of hands-on experience in any Cloud in atleast one of the CSP’s (AWS, GCP and Azure) doing assessment, design or implementation.
  • Working experience in at least three of the areas listed above.
  • CSPs Certifications are a plus (AWS / Azure / GCP, M365).
  • Knowledge of Infra as Code using any of the IAC technologies (Terraform / CloudFormation etc) is a plus.
  • Knowledge of serverless programming / scripting / reading the serverless code (Azure functions / AWS Lambda etc) is a plus.
  • It would be advantageous to have certifications in Enterprise Security Architecture (e.g SABSA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) and/or Certified Cloud Security Professional (CCSP)

 

Due to volume of applications, we regret that only shortlisted candidates will be notified.

 

Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request for money or your personal information. Kindly apply for roles that you are interested in via this official Deloitte website.

Requisition ID:  101257

In Thailand, the services are provided by Deloitte Touche Tohmatsu Jaiyos Co., Ltd. and other related entities in Thailand ("Deloitte in Thailand"), which are affiliates of Deloitte Southeast Asia Ltd. Deloitte Southeast Asia Ltd is a member firm of Deloitte Touche Tohmatsu Limited. Deloitte in Thailand, which is within the Deloitte Network, is the entity that is providing this Website.

Apply now »