Cloud Security, Risk & Compliance Specialist

We are looking for a Cloud Security, Risk & Compliance Specialist to join the Cloud & Hosting Department and strengthen secure, compliant and scalable cloud adoption across FrieslandCampina. You will work across AWS and Azure, translating security and compliance requirements into guardrails, reusable patterns and automated controls.

A key focus is Cloud Security Posture Management (CSPM), providing visibility into misconfigurations, vulnerabilities, exposures and compliance gaps. You will also support Cloud Detection and Response (CDR) and Extended Detection and Response (XDR) by integrating cloud security signals with SIEM, SOAR and XDR platforms. Working with Cloud & Hosting, Cloud Architects, Cyber Security, SOC, DevOps, service owners and suppliers, you will support cloud onboarding, risk remediation and continuous improvement.

Key responsibilities

• Define security standards, baseline controls and compliance guardrails across AWS, Azure and Cloud Edge Services.
• Strengthen CSPM through secure-score improvement, exposure and vulnerability visibility, risk prioritisation and remediation.
• Automate security controls across cloud accounts, subscriptions, workloads and platform services.
• Drive IAM governance, least privilege, RBAC, access reviews and secrets management using Azure Key Vault and AWS Secrets Manager.
• Implement policy- and compliance-as-code using Azure Policy, AWS SCPs, Terraform, Bicep or CloudFormation.
• Embed security scanning and compliance checks into CI/CD and provisioning pipelines.
• Support CDR across cloud control planes, identities, networks, containers, APIs, workloads and runtime signals.
• Integrate cloud alerts with SIEM, SOAR and XDR platforms to improve detection, investigation and response with Cyber Security and SOC teams.
• Define security standards for non-production, test, stage and production environments.
• Enable drift detection, continuous compliance, logging, monitoring and observability.
• Improve compliance dashboards, audit evidence, exception, risk and remediation tracking.
• Support secure landing zones, workload onboarding and reusable architecture patterns.
• Align security controls with FinOps, tagging, cost allocation and governance.
• Maintain security playbooks, standards, onboarding checklists and guidance.

Candidate requirements

• Bachelor’s degree in Computer Science, IT, Cyber Security, Cloud Computing, Engineering or a related field, or equivalent experience.
• Preferred certifications include CCSP, Azure Security Engineer Associate or AWS Certified Security – Specialty. Azure Solutions Architect, CKS and ITIL are advantageous.
• Hands-on knowledge of AWS and Azure security, landing zones, CSPM/CNAPP, CDR, XDR, SIEM, SOAR and workload protection.
• Experience with Trend Vision One/Cloud One Conformity, Microsoft Defender for Cloud, Sentinel, Defender XDR or equivalent platforms.
• Strong knowledge of IAM, RBAC, privileged access, secrets management, DevSecOps, CI/CD security and infrastructure-as-code.
• Knowledge of CIS, ISO 27001, NIST, Microsoft Cloud Security Benchmark and cloud-provider security practices.

Experience requirements

• 5–8 years’ experience in IT, cloud engineering, cyber security, infrastructure security or hosting operations.
• 3–5 years’ hands-on AWS and/or Azure experience.
• 2–3 years’ experience in cloud security, compliance, governance, DevSecOps or security operations.
• Practical experience with CSPM/CNAPP, workload protection, security monitoring, audits, compliance and risk remediation in enterprise environments.

Behavioral capabilities

You can translate technical risks into practical actions, work independently across global teams, challenge decisions using a risk-based approach, influence stakeholders, balance security with business needs, and drive improvement through collaboration and automation.