Cloud Security Lead (m/f/d)

Cloud Security Lead (m/f/d)

1 day ago Be among the first 25 applicants

As a leading international food wholesaler, we at METRO are specialized in catering to the needs of hotels, restaurants, caterers (HoReCa), independent merchants (Traders), and more. With approximately 15 million customers worldwide, our unique multichannel mix offers the flexibility of purchasing goods in-store or via our digitally connected Food Service Distribution (FSD) delivery. We are continuously expanding our international online marketplace, METRO MARKETS, to meet the needs of our professional customers. We take pride in our commitment to sustainability, being listed in various sustainability indices and rankings for years, such as MSCI, CDP, and the Dow Jones Sustainability Index. With operations in 32 countries, over 90,000 employees worldwide, and generating sales of around €30 billion in the fiscal year 2022/23, we are determined to continue our journey of growth.

Join us in developing and strengthening an entire department and transforming cybersecurity capabilities on a global scale. If you\’re committed to making a real impact in the field of Cyber Security, you can #ShapeTheM with us.

Besides an interesting professional environment, we offer you a culture that wants you to thrive and allows learning from each other:

• We try together, we stumble together, we get up together and shape our future. Be part of our transformation, build cross-functional capabilities, and discover new ways of excelling in the Cyber Security field.
• We create impact in the world of food and offer comfort for our customers worldwide. To achieve this, we build capabilities to be the cyber-resilient omni-channel wholesaler.
• We invite you to take on responsibility, make our company your company, and create a business together that remains true to its roots but always seeks new solutions.
• Together, we CARRY the M, we GROW the M, we INSPIRE the M, we SHAPE the M.

The purpose of this role is to define the security requirements for the cloud platforms utilized at METRO based on the industry standards and regulations, as well as monitor their fulfillment. This role owns knowledge of common security threats, security controls, and associated technologies and practices related to securing the relevant IaaS, PaaS, and SaaS cloud platforms, cloud services, and associated IT resources based on cloud technologies.

Your Tasks:

• Define a cloud security governance framework and work on continuous improvement to ensure the secure use of cloud services.
• Define and maintain the cloud security processes as part of the cloud operating model and support both cloud governance topics and cloud risk management.
• Carry out security assessments, protection requirements, and risk analyses of cloud platforms.
• Create individual concepts to improve the security level and create decision templates for risk treatment (in particular definition of measures to reduce risk).
• Engage with new cloud technologies and participate in their secure implementation.
• Participate in the development of DevSecOps concepts and work closely with other IT teams.
• Ensure compliance with industry standards and regulations.

Qualifications:

Educational Background:

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or related field.
• A master’s degree or relevant certifications (e.g., CISSP, CCSP, AWS Certified Security – Specialty) is a plus.

Experience:

• Minimum of 3-5 years of experience in cyber security, with a focus on cloud security.
• Proven experience in defining and implementing security requirements for cloud platforms.
• Hands-on experience with cloud security tools and technologies such as AWS Security Hub, Azure Security Center, or Google Cloud Security Command Center.
• Experience conducting security assessments, risk analyses, and developing security concepts.

Technical Skills:

• In-depth understanding of cloud computing concepts and architectures (IaaS, PaaS, SaaS).
• Proficiency in implementing and managing cloud security controls, including identity and access management, encryption, network security, and data protection.
• Strong knowledge of common security threats, vulnerabilities, and attack vectors in cloud environments.

Analytical Skills:

• Ability to analyze complex security issues, identify root causes, and recommend effective solutions.

Additional Information:

• We offer to be part of a fast-growing international team that has significant scaling ambitions across multiple markets.
• Work-Life Balance: Trusted working hours, 30 days of vacation, and hybrid working option.
• Further training: A comprehensive further training offer over an own training team.
• Well-being: Health programs, a free fitness studio on our campus, and regular employee events.
• Comfort: Very good public transport connections and free parking spaces. A canteen with a varied selection of meals and discounts in our stores and at many partner companies.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology
• Wholesale

#J-18808-Ljbffr