Senior Microsoft Cloud & Platform Security Lead

Job Description - ââââââLead the security strategy and technical direction for Microsoft Azure, Microsoft 365, and hybrid cloud platforms. - Design, implement, and continuously improve security controls across Microsoft Defender, Sentinel, Entra ID, Azure, and Microsoft security services. - Define and maintain cloud security standards, technical baselines, and governance aligned with CIS, NIST, ISO 27001, and organisational security policies. - Monitor and improve Microsoft Secure Score and overall cloud security posture through regular assessments and gap analysis. - Act as the senior escalation point for critical Microsoft platform security incidents, coordinating containment, forensic investigations, and recovery with Security Operations teams - Provide governance for Azure Key Vault, PKI, GitHub Advanced Security, DevSecOps security controls, Microsoft Copilot security, and Power Automate governance. - Provide technical leadership, mentoring, and guidance to cloud security engineers and broader cyber security teams - Evaluate emerging Microsoft security technologies and recommend enhancements to improve resilience, compliance, and operational efficiency. - Ensure security controls meet regulatory, audit, and enterprise governance requirements while supporting business objectives. Minimum Requirements - Bachelor's Degree in Information Technology, Computer Science, Cyber Security, or a related field. - Minimum 810 years' experience in Cyber Security, Cloud Security, or Infrastructure Security. - At least 5 years' hands-on experience securing Microsoft Azure and Microsoft 365 environments. - Extensive experience with: - Microsoft Defender Suite (Endpoint, Office 365, Identity, Cloud Apps) - Microsoft Sentinel (SIEM/SOAR) - Microsoft Defender XDR - Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection, and Privileged Identity Management (PIM) - Azure Security Centre / Defender for Cloud - Azure RBAC, NSGs, Security Policies, and Azure Governance - Microsoft Purview, DLP, and Sensitivity Labels - Azure Key Vault and PKI Governance - GitHub Advanced Security and DevSecOps security controls - Strong understanding of Microsoft Secure Score and cloud security posture management. - Experience designing enterprise cloud security architectures and governance frameworks. - Knowledge of security frameworks including NIST, CIS Controls, ISO 27001, and cloud security best practices. - Experience leading major security incidents, investigations, and remediation activities. - Excellent stakeholder management, leadership, mentoring, and communication skills