Senior Manager, Cloud Security, Cyber & Data Resilience

Kroll is a global leader in risk and financial advisory solutions, seeking a Senior Manager for their Cloud Security discipline within the Cyber, Data, and Resilience practice. This role is responsible for architecting, engineering, and implementing secure cloud solutions across various environments while leading the cloud security practice and mentoring team members.

Responsibilities:

• Lead and develop the cloud security practice, including team development, capability building, and solution innovation
• Define cloud security architecture standards, reference architectures, and engineering best practices
• Develop and maintain cloud security maturity frameworks for client assessment and continuous improvement
• Collaborate with partners (Microsoft Azure, AWS, CrowdStrike) to co-develop solutions and stay current on platform capabilities
• Drive thought leadership through publications, presentations, and industry engagement
• Design comprehensive cloud security architecture for Azure, AWS, and hybrid/multi-cloud environments
• Engineer secure cloud foundations including identity management, network segmentation, workload protection, and data security
• Develop Infrastructure as Code (IaC) templates and automation for repeatable, secure cloud deployments
• Create reference architectures for cloud-native security, container security, and serverless architectures
• Design cloud security monitoring, logging, and incident response architectures
• Lead complex cloud security engagements from discovery through deployment and maturity advancement
• Conduct cloud security posture assessments and gap analyses against industry frameworks
• Develop cloud security roadmaps aligned with business objectives and risk appetite
• Provide executive-level guidance on cloud security strategy and investment priorities
• Oversee implementation teams to ensure architecture vision is properly executed
• Support the development of proposals and statements of work for Kroll clients
• Build client maturity programs that advance cloud security capabilities over time
• Identify and implement emerging cloud security technologies and practices
• Optimize existing cloud security architectures for performance, cost, and security effectiveness
• Mentor team members on cloud security architecture and engineering practices

Requirements:

• 8+ years in information security with 5+ years focused on cloud security architecture and engineering
• Proven track record designing and implementing enterprise-scale cloud security solutions
• Experience leading cloud security practices or teams
• Demonstrated expertise in at least two major cloud platforms (Azure, AWS, GCP)
• Strong background in security engineering and hands-on implementation
• Deep expertise in Azure and AWS security services (IAM, networking, compute security, data protection)
• Strong understanding of cloud-native security architecture patterns and Zero Trust principles
• Proficiency with Infrastructure as Code (Terraform, ARM templates, CloudFormation)
• Experience with container security (Kubernetes, Docker) and serverless security
• Knowledge of cloud security frameworks (CSA CCM, CIS Benchmarks, Azure/AWS Well-Architected)
• Familiarity with cloud security posture management (CSPM) and cloud workload protection (CWPP) tools
• Excellent communication skills with ability to engage both technical teams and executives
• Strong leadership and mentoring capabilities
• Ability to balance strategic thinking with hands-on technical delivery
• Client-focused with strong relationship management skills
• Passion for continuous learning and staying ahead of cloud security threats
• Microsoft Certified: Azure Security Engineer Expert or Azure Solutions Architect Expert
• AWS Certified Security - Specialty
• CISSP, CCSP, or equivalent security certifications