Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape. For over 50 years our work has guided the decisions of the world’s most influential energy producers, utilities companies, financial institutions and governments. Now, with the world’s energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That’s why we’ve redefined what’s possible with Intelligence Connected. By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe. This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence – whether planning days, weeks, months or decades ahead. Wood Mackenzie Intelligence Connected <a href="https://www.woodmac.com/">WoodMac.com</a> <a href="https://woodmac.wistia.com/medias/xxwo1ydobh">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul>Position Overview:We are looking for an experienced, hands-on Cloud Security Specialist to join our cyber security team. This is a technical individual-contributor role focused on securing our cloud and application environments day to day; designing and implementing controls, assessing our cloud posture, and working alongside engineering and DevOps teams to build security in from the start.You'll be someone who is comfortable working directly in cloud consoles and security tooling, enjoys getting into the technical detail, and can communicate clearly with both technical teams and other stakeholders. You'll be a technical point of reference for colleagues on cloud security matters.Key Responsibilities:<ul><li>Design, implement, and maintain security controls across our cloud environment in align with our cyber risk and control framework</li><li>Conduct cloud security assessments and architecture reviews, and track findings through to remediation</li><li>Manage and tune cloud-native security tooling (CSPM, CWPP, cloud WAF)</li><li>Working knowledge and input to identity and access management (IAM) policies and controls</li><li>Coordinate cloud vulnerability remediation with the relevant teams</li><li>Investigate cloud security events and support incident response</li><li>Help ensure our cloud environment aligns with recognised frameworks and benchmarks (CIS, CSA CCM, NIST)</li><li>Contribute to security policies, standards, and technical documentation</li><li>Support compliance activities (e.g. SOC 2, ISO 27001, PCI-DSS, GDPR) as they relate to the cloud environment</li><li>Keep current with emerging cloud threats, vulnerabilities, and tooling, and share knowledge with the team</li><li>Supporting wider security team where possible</li></ul>Essential Requirements:<ul><li>4+ years of cyber security experience, with 2+ years hands-on in cloud security</li><li>Deep, practical experience securing your primary cloud platform (AWS and Azure)</li><li>Working knowledge of IAM, network security concepts, and encryption/data-protection fundamentals</li><li>Familiarity with at least one major security framework (NIST CSF, MITRE ATT&amp;CK, CIS Benchmarks, or Zero Trust)</li><li>Ability to explain security issues and trade-offs clearly to both technical and non-technical audiences</li></ul>Desirable (nice to have, not required)<ul><li>Experience integrating security into CI/CD pipelines / DevSecOps practices</li><li>Exposure to SIEM platforms (e.g. Splunk, Sentinel) and EDR solutions</li><li>Experience with SAST/DAST or vulnerability-scanning tools</li><li>Background in penetration testing or offensive security</li><li>Experience with threat intelligence or threat-hunting tooling</li><li>Experience in a regulated industry (financial services, healthcare, energy)</li></ul>Technical Skills:<ul><li>Strong, hands-on expertise with cloud platform security services and native tooling</li><li>Understanding of network security, firewalls, IDS/IPS, and VPN technologies</li><li>Comfortable working with IAM, cloud configuration, and infrastructure security settings directly</li></ul>Certifications and Education (one or more is a plus, not essential)<ul><li>Bachelor's degree in Computer Science, Information Security, or a related field -or equivalent practical experience</li><li>CCSP (Certified Cloud Security Professional)</li><li>AWS Certified Security – Specialty</li><li>Microsoft Certified: Azure Security Engineer Associate</li><li>CISSP (Certified Information Systems Security Professional)</li></ul>Soft Skills:<ul><li>Strong analytical and problem-solving abilities</li><li>Clear written and verbal communication</li><li>Ability to explain complex security concepts to technical and non-technical audiences</li><li>Strong attention to detail and the ability to prioritise under pressure</li><li>Collaborative approach to working with cross-functional teams</li></ul>#LI-DB1 Equal Opportunities We are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex (including pregnancy, sexual orientation, and gender identity), national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a>

In the middle of the energy transition, businesses and governments are faced with significant challenges. But the pace and scale of change mean every decision is made&nbsp;under mounting pressure.&nbsp; Now, more than ever, companies need reliable data, analytics and actionable insight. Wood Mackenzie is the&nbsp;leading global provider of data and analytics solutions&nbsp;for the renewables, energy and natural resources sectors . Wood Mackenzie&rsquo;s services&nbsp;include data, analytics, insight, events and consultancy.&nbsp; A trusted partner for over 50 years, Wood Mackenzie&rsquo;s team has over 2,300 experts across more than 30 global&nbsp;locations who cover the entire supply chain. Wood Mackenzie&rsquo;s data and analytics empowers energy producers, governments and financial institutions to be confident in&nbsp;their investment decisions in the face of rapidly evolving markets. Part of the Veritas group.

Cloud Security Specialist

Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape. For over 50 years our work has guided the decisions of the world’s most influential energy producers, utilities companies, financial institutions and governments. Now, with the world’s energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That’s why we’ve redefined what’s possible with Intelligence Connected. By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe. This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence – whether planning days, weeks, months or decades ahead. Wood Mackenzie Intelligence Connected <a href="https://www.woodmac.com/">WoodMac.com</a> <a href="https://woodmac.wistia.com/medias/xxwo1ydobh">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul>Position Overview:We are looking for an experienced, hands-on Cloud Security Specialist to join our cyber security team. This is a technical individual-contributor role focused on securing our cloud and application environments day to day; designing and implementing controls, assessing our cloud posture, and working alongside engineering and DevOps teams to build security in from the start.You'll be someone who is comfortable working directly in cloud consoles and security tooling, enjoys getting into the technical detail, and can communicate clearly with both technical teams and other stakeholders. You'll be a technical point of reference for colleagues on cloud security matters.Key Responsibilities:<ul><li>Design, implement, and maintain security controls across our cloud environment in align with our cyber risk and control framework</li><li>Conduct cloud security assessments and architecture reviews, and track findings through to remediation</li><li>Manage and tune cloud-native security tooling (CSPM, CWPP, cloud WAF)</li><li>Working knowledge and input to identity and access management (IAM) policies and controls</li><li>Coordinate cloud vulnerability remediation with the relevant teams</li><li>Investigate cloud security events and support incident response</li><li>Help ensure our cloud environment aligns with recognised frameworks and benchmarks (CIS, CSA CCM, NIST)</li><li>Contribute to security policies, standards, and technical documentation</li><li>Support compliance activities (e.g. SOC 2, ISO 27001, PCI-DSS, GDPR) as they relate to the cloud environment</li><li>Keep current with emerging cloud threats, vulnerabilities, and tooling, and share knowledge with the team</li><li>Supporting wider security team where possible</li></ul>Essential Requirements:<ul><li>4+ years of cyber security experience, with 2+ years hands-on in cloud security</li><li>Deep, practical experience securing your primary cloud platform (AWS and Azure)</li><li>Working knowledge of IAM, network security concepts, and encryption/data-protection fundamentals</li><li>Familiarity with at least one major security framework (NIST CSF, MITRE ATT&amp;CK, CIS Benchmarks, or Zero Trust)</li><li>Ability to explain security issues and trade-offs clearly to both technical and non-technical audiences</li></ul>Desirable (nice to have, not required)<ul><li>Experience integrating security into CI/CD pipelines / DevSecOps practices</li><li>Exposure to SIEM platforms (e.g. Splunk, Sentinel) and EDR solutions</li><li>Experience with SAST/DAST or vulnerability-scanning tools</li><li>Background in penetration testing or offensive security</li><li>Experience with threat intelligence or threat-hunting tooling</li><li>Experience in a regulated industry (financial services, healthcare, energy)</li></ul>Technical Skills:<ul><li>Strong, hands-on expertise with cloud platform security services and native tooling</li><li>Understanding of network security, firewalls, IDS/IPS, and VPN technologies</li><li>Comfortable working with IAM, cloud configuration, and infrastructure security settings directly</li></ul>Certifications and Education (one or more is a plus, not essential)<ul><li>Bachelor's degree in Computer Science, Information Security, or a related field -or equivalent practical experience</li><li>CCSP (Certified Cloud Security Professional)</li><li>AWS Certified Security – Specialty</li><li>Microsoft Certified: Azure Security Engineer Associate</li><li>CISSP (Certified Information Systems Security Professional)</li></ul>Soft Skills:<ul><li>Strong analytical and problem-solving abilities</li><li>Clear written and verbal communication</li><li>Ability to explain complex security concepts to technical and non-technical audiences</li><li>Strong attention to detail and the ability to prioritise under pressure</li><li>Collaborative approach to working with cross-functional teams</li></ul>#LI-DB1 Equal Opportunities We are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex (including pregnancy, sexual orientation, and gender identity), national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a>

Cloud Security Specialist

About the Job

About the Company

Wood Mackenzie

Similar Jobs

Global IT Security Expert - OT

Global IT Security Expert - OT

Information Security Analyst

Information Security Analyst

Security Operations Engineer - Germany

Security Operations Engineer - Germany

Information Security Manager

Information Security Manager

Staff SecOps Engineer

Staff SecOps Engineer

Cyber Security Lead

Cyber Security Lead

Engineer IV, Cyber DevSecOps

Engineer IV, Cyber DevSecOps

Cyber Security Operations Engineer

Cyber Security Operations Engineer

Engineer, Cloud Security

Engineer, Cloud Security

Senior Cyber Security Engineer

Senior Cyber Security Engineer