Kofax

We are seeking an experienced and hands-on Manager Cloud Security Operations to lead our security practice across AWS, Azure and colocation datacenters. This role is responsible for defining and executing the cloud security strategy, managing a small team of cloud security professionals, and driving secure operations across our SaaS platforms. The Cloud Security Manager will act as the primary liaison to our Managed Security Operations Centers (SOC), working closely with Cloud Platform Operations, Cloud Architecture, R&D, GRC, and CISO office to protect our environments while ensuring audit readiness and regulatory compliance.

Key Responsibilities

• Define and execute a pragmatic, risk-driven cloud security strategy for our workloads.
• Own and manage the relationship with the Managed Security Operations Centers (SOC), ensuring threat detection, response, and escalation workflows are effective and continuously improved.
• Lead the implementation of cloud security posture management and enforce configuration baselines, access controls, and logging standards.
• Drive integration of security into infrastructure-as-code and CI/CD pipelines in collaboration with Operations, Architects and R&D.
• Implement, and operate security tools such as Microsoft Defender for Cloud, AWS Security Hub, Guard Duty, Azure Sentinel and others.
• Oversee incident response, vulnerability management, and continuous monitoring operations across multi-cloud environments.
• Support compliance initiatives including SOC2 Type II and ISO 27001, aligning security practices with NIST and CSA CCM frameworks.
• Collaborate with the Director Cloud GRC to report risk posture and remediation progress.
• Manage and develop a tight knit team of cloud security engineers, setting clear goals and fostering a culture of ownership and continuous learning.
• Prepare security metrics, status reports, and risk assessments for Cloud Service leadership and stakeholders.

While the job description describes what is anticipated as the requirements of the position, the job requirements are subject to change based upon any changing needs and requirements of the business.

Required Experience

• 8+ years of cybersecurity experience with a focus on cloud-native security in AWS and/or Azure.
• 3+ years of experience managing security teams or security operations in a leadership capacity.
• Proven success securing and hardening SaaS workloads and cloud infrastructure, including IAM, encryption, network security, and logging.
• Experience managing or collaborating with a third-party SOC or MSSP.
• Familiarity with DevOps and DevSecOps practices and infrastructure-as-code using tools such as Terraform, CloudFormation, or ARM templates.
• Strong understanding of cloud compliance frameworks including SOC2, ISO 27001, NIST 800-53, CIS Controls, and CSA CCM.
• Excellent communication skills with the ability to translate technical risks into business context for diverse audiences.

Preferred Skills:

• Certifications such as CISSP, CCSP, CISM, AWS Certified Security – Specialty, or Microsoft Certified: Security Engineer Associate.
• Experience working in multi-cloud or hybrid cloud environments.
• Hands-on experience with modern security platforms.
• Strong documentation, reporting, and stakeholder communication skills.
• Ability to lead both technical execution and strategic planning initiatives across distributed teams.

Tungsten Automation an Equal Opportunity Employer