About the role
We are seeking a Head of Infrastructure & Cloud Security to lead and develop our security operations across cloud, network, identity, endpoint, and data domains. In this role, you will design and enforce security protocols in a hybrid environment, lead a team of security engineers, promote a cloud-first approach, and report on enterprise security metrics
Responsibilities • Shape and oversee the infrastructure and cloud security strategy, reporting directly to the CISO • Hire, lead, mentor, and develop security engineers and team leads • Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions • Manage and lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments • Collaborate with Platform and SRE teams to manage cloud IAM and security-group guardrails • Enhance and manage endpoint security across managed devices, including hardening and telemetry health • Own data security and cryptography controls, including KMS, secrets management, PKI, and certificate lifecycle • Track, analyze, and report enterprise security metrics
Requirements • Proven experience in leading security engineers and managing teams • Hands-on experience in cybersecurity engineering • Strong experience in securing on-premises infrastructure in an enterprise environment • Experience with any major cloud provider • Proficiency in cloud and network security, including CSPM/CNAPP/CWPP tools, WAF, DNS security, and IaC scanning • Experience with EDR/XDR and MDM solutions • Understanding of identity and access management, including cloud IAM and security-group guardrails • Experience with KMS, secrets management, PKI, and certificate management • Ability to enforce security controls without hindering delivery for Platform/SRE/DevOps teams
Will be a plus • Experience in building or maturing an infrastructure/cloud security function from an early stage • Background in fintech, brokerage, trading platforms, payments, or regulated environments • Knowledge of Kubernetes/container security and cloud-native architectures • Exposure to SOC 2, ISO 27001, or DORA compliance frameworks • Familiarity with security tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk
We offer • 15 paid vacation days off year • 10 paid sick leave per year • Public holidays as per the company's approved Public holiday list • Medical budget • Opportunity to work remotely • Professional educational budget • Language learning budget • Wellness budget (gym membership, sport gear and related expenses)
Text as published by JustMarkets. We don't edit postings; apply and ask questions on the employer's site.