• Develop and implement security strategies and solutions for Azure, AWS, and Google Cloud environments, focusing on network security, identity and access management, and data protection.
• Leverage automation, Infrastructure as Code (IaC), and continuous compliance strategies. Interface with DevSecOps teams to define and implement security and compliance requirements for production CI/CD pipelines.
• Conduct risk assessments and vulnerability analyses for cloud infrastructure, identify potential threats, and recommend appropriate mitigation strategies.
• Implement and manage Microsoft Purview for data governance, ensuring effective data classification, encryption, and compliance with data loss prevention (DLP) policies.
• Utilize Microsoft Intune for endpoint management, ensuring secure and compliant configurations across all devices.
• Collaborate with IT teams to implement security measures within Azure and Microsoft 365, including setting up multi-factor authentication (MFA), configuring security groups, and managing conditional access policies.
• Work closely with other IT teams to integrate security practices into development and operational processes, providing guidance and training on cloud security best practices to stakeholders.
• Oversee SOC activities in monitoring cloud environments for security incidents and responding to alerts. Provide leadership and ensure effective incident response and remediation, staying informed of all incidents and ensuring the SOC MSSP meets performance expectations.
• Utilize automation tools and scripting (e.g., PowerShell) to streamline security processes, manage security configurations, and enhance overall efficiency.
• Ensure cloud environments comply with industry standards, regulations, and best practices (e.g., HIPAA, NIST), and assist in maintaining compliance certifications and preparing for audits.
• Create and maintain comprehensive security policies and procedures for cloud operations.
• Develop and deliver targeted security training and awareness programs to ensure staff are well-informed and compliant with best practices.
• Deep knowledge of cloud security best practices across major platforms (Azure, AWS, Google Cloud).
• In-depth understanding of risk management and vulnerability analyses of cloud infrastructure.
• Proficiency in network security, identity and access management, and data protection within cloud environments.
• Ability to create and deliver effective security training and awareness programs.
• Strong interpersonal skills for working with IT teams and stakeholders to integrate security practices.
• Experience in leading cross-functional incident response efforts, including coordination with legal, compliance, and executive teams.
• Proficiency in using automation tools and scripting languages (e.g., PowerShell) to enhance security processes and efficiency.
• Ability to work in and manage ambiguity, including dealing effectively with issues that do not always have a process, system, or solution in place.
• Demonstrate alignment to our company's values, along with the capability to hire, lead, develop, and motivate a team.
• Highly developed oral and written interpersonal, communication, negotiation and conflict management skills and the ability to work effectively with other people.
• Self-starter with high initiative.
• Perform other duties as assigned.

Required Qualifications

• Minimum of 5 years of experience in cloud security, with hands-on experience in managing and securing cloud environments across Azure, AWS, and Google Cloud is required.
• One or more of the following security certifications is required:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer.
• Experience and expertise is required in the following core areas:
• Implementing and/or materially maturing an existing Cloud Security program.
• Data classification, encryption methodologies, managing data loss prevention, and compliance standards.
• Knowledge of mobile device management (MDM) and mobile application management (MAM) principles, ensuring secure configurations and compliance across diverse endpoints.
• Conducting risk assessments, performing audits, and leading incident response efforts.
• Developing and maintaining security policies and procedures.
• Recommending and implementing security tools specific to cloud environments.
• Minimum of 5 years of experience in cybersecurity & ensuring standards with HIPAA compliance is required.

Preferred Qualifications

• Familiarity with NIST standards and HITRUST MyCSF certification is preferred.
• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field is preferred.

At Aspirion we invest in our employees by offering unlimited opportunities for advancement, a full benefits package, including health, dental, vision and life insurance upon hire, matching 401k, competitive salaries, and incentive programs.

Individual pay is determined by a number of factors including, but not limited to, job-related skills, experience, education, training, licensure or certifications obtained. Market, location and organizational factors are also considered.

Must reside in the United States within one of the states listed below:

Alabama, Arizona, Arkansas, Delaware, Florida, Georgia, Iowa, Indiana, Kansas, Kentucky, Louisiana, Massachusetts, Maine, Maryland, Michigan, Minnesota, Missouri, Mississippi, Montana, North Carolina, Nebraska, New Hampshire, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Virginia, Wisconsin, West Virginia, and Wyoming.

AAP/EEO Statement

Equal Opportunity Employer/Drug-Free Workplace: Aspirion is an Equal Employment Opportunity employer. We adhere to a policy of making employment decisions without regard to race, color, age, sex, pregnancy, religion, national origin, ancestry, medical condition, marital status, gender identity citizenship status, veteran status, disability, or veteran status. Aspirion has a Drug-Free Workplace Policy in effect that is strictly adhered to.