Head of Infrastructure & Cloud Security

We are seeking a Head of Infrastructure & Cloud Security to lead and develop our security operations across cloud, network, identity, endpoint, and data domains. In this role, you will design and enforce security protocols in a hybrid environment, lead a team of security engineers, promote a cloud-first approach, and report on enterprise security metrics

Responsibilities

• Shape and oversee the infrastructure and cloud security strategy, reporting directly to the CISO
• Hire, lead, mentor, and develop security engineers and team leads
• Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions
• Manage and lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments
• Collaborate with Platform and SRE teams to manage cloud IAM and security-group guardrails
• Enhance and manage endpoint security across managed devices, including hardening and telemetry health
• Own data security and cryptography controls, including KMS, secrets management, PKI, and certificate lifecycle
• Track, analyze, and report enterprise security metrics

Requirements

• Proven experience in leading security engineers and managing teams
• Hands-on experience in cybersecurity engineering
• Strong experience in securing on-premises infrastructure in an enterprise environment
• Experience with any major cloud provider
• Proficiency in cloud and network security, including CSPM/CNAPP/CWPP tools, WAF, DNS security, and IaC scanning
• Experience with EDR/XDR and MDM solutions
• Understanding of identity and access management, including cloud IAM and security-group guardrails
• Experience with KMS, secrets management, PKI, and certificate management
• Ability to enforce security controls without hindering delivery for Platform/SRE/DevOps teams

Will be a plus

• Experience in building or maturing an infrastructure/cloud security function from an early stage
• Background in fintech, brokerage, trading platforms, payments, or regulated environments
• Knowledge of Kubernetes/container security and cloud-native architectures
• Exposure to SOC 2, ISO 27001, or DORA compliance frameworks
• Familiarity with security tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk

We offer

• 15 paid vacation days off year
• 10 paid sick leave per year
• Public holidays as per the company's approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional educational budget
• Language learning budget
• Wellness budget (gym membership, sport gear and related expenses)