Own and deliver internal IT/cloud projects from requirements through to implementation
Identify and remediate gaps across cloud security, access management, configuration and operational processes
Specify and coordinate end-user technology requirements (PC/laptop standards, procurement input, lifecycle, rollouts)
Work with stakeholders to gather requirements and translate them into technical solutions and work packages
Maintain an accurate view of cloud platforms and SaaS systems (Microsoft 365, Azure, AWS, Google Workspace and other SaaS)
Review and improve user accounts, permissions, privileged access and system ownership
Implement and maintain practical controls, including: MFA and access policy standards
Act as the primary internal operational contact for the third-party IT provider
Maintain IT asset registers (hardware, software and cloud accounts) and ensure licensing and lifecycle tracking is accurate
Contribute to implementation and ongoing maintenance of the ISMS aligned to ISO 27001
Identify operational and governance improvements and drive them through to completion.

5+ years’ experience in cloud operations, IT engineering, or security-focused IT roles
Experience working with cloud environments (Microsoft 365, Google Workspace, AWS, or Azure)
Understanding of information security principles, risk management, and compliance frameworks (ISO 27001, GDPR, NIST)
Hands-on experience with vulnerability management, patch control, and endpoint security
Strong documentation, process mapping, and reporting skills
Experience managing or coordinating outsourced IT vendors or MSPs
Excellent communication, organization, and analytical skills
Strong documentation skills and a structured, process-driven approach.

Cloud Governance, Security Engineer

Key skills