Information Security Officer – Cloud Security

Deloitte

Information Security Officer leading cloud security governance for a Tier 1 Global Bank at Deloitte. Responsible for cyber risk management and securing cloud architectures.

Posted 7/9/2026contractLondon • 🇬🇧 United KingdomMid-LevelSenior💰 £90,206 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudCyber SecurityEC2Google Cloud PlatformPythonSDLCTerraform

About the role

Key responsibilities & impact

Lead Information Security activities across supported technology and infrastructure functions.
Identify opportunities to automate and standardise security controls.
Identify, investigate and remediate security vulnerabilities across infrastructure and applications.
Analyse source code to identify and mitigate security weaknesses.
Review automated security testing results and prioritise remediation based on risk.
Perform manual and automated security testing where required.
Conduct Information Security risk assessments.
Analyse root causes of vulnerabilities and recommend corrective actions.
Work with engineering and business teams to deliver secure technical solutions.
Contribute to enterprise security architecture across major technology programmes.
Ensure cloud architectures align with corporate security policies and industry best practices.
Assess security risks and define compensating controls where required.
Translate business requirements into secure technical solutions.
Recommend secure infrastructure platforms and cloud architectures.
Influence security strategy and architectural decisions.
Provide technical leadership across complex cloud security initiatives.

Requirements

What you’ll need

Minimum 6 years’ IT experience, including at least 4 years in Cyber Security/Information Security across cloud and on-premises environments.
Minimum 2 years securing AWS and/or GCP cloud environments.
Experience conducting Information Security Risk Assessments and Security Governance.
Strong understanding of AWS Well-Architected Framework and Google Cloud Security Command Center.
Strong knowledge of AWS and GCP IAM security models.
In-depth knowledge of cloud infrastructure including VPC, EC2, S3, Cloud Storage and Compute Engine.
Familiarity with NIST, ISO 27001 and CSA STAR compliance frameworks.
Experience engaging with Information Security, Risk, Control & Compliance, Architecture and Project teams.
Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS.
Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security and network segmentation.
Ability to design and review secure technical architectures.
Experience reviewing Infrastructure as Code using Terraform and/or CloudFormation.
Strong understanding of SDLC and CI/CD pipelines.
Hands-on Python scripting experience.
Excellent communication and influencing skills.
Strong stakeholder and relationship management.
Excellent analytical and problem-solving capability.
Self-motivated with the ability to lead complex security initiatives.
Strong technical documentation and presentation skills.
Bachelor’s degree in Computer Science, Cyber Security or related discipline (or equivalent experience).
CISSP, CISM or CCSP highly desirable.
AWS Solutions Architect or Google Professional Cloud Security Engineer certifications are advantageous.

Benefits

Comp & perks

£10,887 holiday pay

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Cloud SecuritySecurity Vulnerability RemediationSecurity TestingPython ScriptingInfrastructure SecuritySDLCCI/CD PipelinesAutomated Security TestingSecurity Architecture DesignRoot Cause Analysis

Soft Skills

Excellent CommunicationStakeholder ManagementAnalytical Problem-SolvingSelf-Motivated LeadershipTechnical Documentation

Certifications

CISSPCISMCCSPAWS Solutions ArchitectGoogle Professional Cloud Security Engineer