WNS, part of Capgemini, is an Agentic AI-powered leader in intelligent operations and transformation, serving more than 700 clients across 10 industries, including Banking and Financial Services, Healthcare, Insurance, Shipping and Logistics, and Travel and Hospitality. We bring together deep domain excellence – WNS’ core differentiator – with AI-powered platforms and analytics to help businesses innovate, scale, adapt and build resilience in a world defined by https://jobeax.com/link/h7aZtSGmB9uROXYe purpose is clear: to enable lasting business value by designing intelligent, human-led solutions that deliver sustainable outcomes and a differentiated impact. With three global headquarters across four continents, operations in 13 countries, 65 delivery centers and more than 66,000 employees, WNS combines scale, expertise and execution to create meaningful, measurable impact.
Conduct comprehensive design and architecture reviews of end-to-end cloud technology solutions, including cloud platforms (M365, Azure, AWS) and SaaS, PaaS, and IaaS implementations, ensuring security by design.
Perform in-depth technical assessments of implemented technology solutions (on-premises and cloud) to identify misconfigurations, deviations from best practices, and potential attack vectors.
Evaluate cloud security solutions against threat models, risk assessments, and industry-recognized frameworks (e.g., NIST CSF, CSA CCM, ISO 27001, CIS Benchmarks).
Provide expert security recommendations and architectural guidance to Risk, InfoSec, and Enterprise IT leadership, as well as to client-facing processes.
Lead and execute Cloud Security Posture Management (CSPM) reviews using CNAPP (Cloud-Native Application Protection Platform) tools to assess cloud security posture, cloud identity protection (CIEM), workload protection, and container security.
Run regular compliance scans of cloud resources against standards such as HIPAA, GDPR, PCI DSS, and SOC 2, and drive continuous improvement of compliance posture.
Review and provide feedback on cloud security policies, procedures, and hardening documents, ensuring alignment with CIS benchmarks and organizational InfoSec policies.
Conduct cloud risk assessments to identify threats, vulnerabilities, and misconfigurations that could impact IT operations and sensitive data.
Secure Cloud Development & Operations Practices
Collaborate with Enterprise IT and DevOps teams to embed security throughout the SDLC and CI/CD pipelines.
Review Infrastructure as Code (IaC) templates and automation scripts for security flaws, guiding teams on secure IaC best practices.
Participate in cloud attack path analysis to understand adversary techniques and design preventative and detective controls.
Ensure CIS and other security best practices are rigorously applied across new and existing applications, products, and cloud infrastructure.
Security Governance & Remediation Oversight
Partner with cross-functional teams to track and drive remediation of identified security vulnerabilities and misconfigurations.
Contribute to the continuous improvement of cloud security governance frameworks and processes.
Act as a subject matter expert for incident response and forensic readiness related to cloud security incidents.
Collaborate on cloud attack path analysis across teams.
Qualifications
Experience
8–12+ years of progressive experience in Information Security, with at least 5–7 years focused specifically on cloud security architecture, engineering, and review.
Extensive hands-on experience with security services and features across major cloud providers (Azure, AWS, GCP).
Demonstrable experience performing security assessments, penetration testing, or vulnerability management within cloud environments.
Proven experience designing and reviewing secure cloud architectures for complex enterprise solutions.
Technical Expertise
Strong understanding of cloud computing principles (IaaS, PaaS, SaaS) and the Shared Responsibility Model.
Expertise in cloud security frameworks and standards: NIST CSF, CSA CCM, ISO 27001, CIS Benchmarks, OWASP Cloud Top 10.
Hands-on proficiency with leading CNAPP platforms (e.g., Prisma Cloud, Wiz, Tenable, Lacework, Microsoft, CrowdStrike Cloud Security) for CSPM, CIEM, cloud workload protection, and container security.
Strong grasp of Identity and Access Management (IAM) in the cloud: Azure AD, AWS IAM, GCP IAM, conditional access policies, MFA, SSO, PIM/PAM.
Advanced knowledge of network security in the cloud: VPC/VNet design, network segmentation, firewalls (WAF, NGFW), security groups/NSGs, VPNs, and private links.
Expertise in data security and encryption, including securing data at rest and in transit using native cloud encryption services (KMS, Key Vault, Cloud KMS).
Understanding of application security in the cloud, including secure coding practices, API security, serverless function security, and DevSecOps integration.
Ability to review and secure Infrastructure as Code (Terraform, CloudFormation, ARM templates, Bicep) and policy-as-code implementations.
Knowledge of containerization (Docker, Kubernetes) and associated security best practices and tools.
Compliance & Governance
In-depth knowledge of regulatory compliance requirements (GDPR, HIPAA, PCI DSS, SOC 2, ISO 27001) and their application in cloud environments.
Experience with GRC (Governance, Risk, and Compliance) tools and processes for cloud.
Analytical & Communication Skills
Exceptional analytical and problem-solving skills with meticulous attention to detail.
Strong ability to articulate complex security concepts and risks to technical and non-technical audiences alike.
Excellent written and verbal communication skills for documentation, reports, and presentations.
Ability to work independently and collaboratively within a distributed team, managing multiple priorities effectively.
Certifications (Highly Preferred)
Cloud Security Certifications:
(ISC)² Certified Cloud Security Professional (CCSP)
AWS Certified Security – Specialty
Microsoft Certified: Azure Security Engineer Associate (AZ-500)
Google Professional Cloud Security Engineer
Certificate of Cloud Security Knowledge (CCSK)
General Security Certifications:
(ISC)² CISSP (Certified Information Systems Security Professional)
... and manage a Senior Manager of Information Security & Compliance. Provide dotted-line leadership to security engineering within Platform/DevOps and manage consultant, MSSP, and penetration-testing vendor relationships. What We're Looking For - 10–15 years of experience in information security/GRC, with at least 3 years ...
About the Role : We are looking for a professional with strong experience in IT, Security, or Development, with hands-on expertise in either Python-based development and data processing or Microsoft Power Apps. The ideal candidate should also have proven experience in continuous improvement and https://jobeax.com/link/c9llKPAboTtVPB08 ...
... least privilege.- Conduct deep-dive troubleshooting of security and compliance configurations to identify root causes and implement long-term technical https://jobeax.com/link/r88jpMuCZk0kavk1 Skillset : - Demonstrated expertise in configuring and managing Microsoft Purview, with a deep understanding of information protection, ...
... hybrid project delivery environments.- Exposure to CMMI, SOC 2, ISO 9001, or other compliance frameworks.- Experience supporting external certification audits.- Experience with software quality metrics, process maturity assessments, and governance reporting.- Exposure to cloud security and compliance https://jobeax.com/link/WdzkGJhOH63bkJV5 ...
Role Overview : We are looking for skilled Oracle Security Consultants and Senior Consultants with hands-on experience in Oracle Cloud ERP Security, Segregation of Duties (SoD), Risk Management, and role management. The ideal candidate should have experience creating, customizing, and maintaining security roles based on ...
... Controls, and Financial Reporting Compliance.- Experience supporting Oracle Cloud implementation and enhancement activities.- Experience across additional Oracle Cloud ERP or HCM modules.- Experience in a consulting environment.- Experience with automation for recurring security support activities.- Experience using PL/SQL ...
About the job :Your role, your impact :As an Oracle Cloud Security Consultant, you'll play a critical role in designing, implementing, and managing security controls and risk mitigation strategies across Oracle Cloud https://jobeax.com/link/o6p5daBAbHuY5bFP'll leverage your expertise in Oracle Cloud Security, role-based ...
... resilience. Your golden ticket to the AMINA team: Required - Up to 3 years of experience in Information Security, Cybersecurity, Risk Management, IT Audit, Compliance, Technology Governance, or a related field. - Bachelor's degree in Information Security , Cybersecurity, Computer Science, Information Systems, Risk Management, ...
... certification. Preferred qualifications - Exposure to SOC 1, SOC 2, PCI DSS, IT General Controls, privacy, cloud security, third-party risk management or regulatory compliance assessments. - CISA, CISSP, CRISC or an equivalent information security qualification. The impact you’ll make As an Analyst II, Information Security, you’ll ...
... Min Experience: 2+ years Location: Bangalore JobType: full-time We are looking for an Information Security Engineer with 2–6 years of experience to strengthen cloud, infrastructure, and data security across the organization. The ideal candidate will have strong fundamentals in information security, hands-on experience securing ...