Adresse
Forme de travailDescription & main responsibilities
Improve Ayvens Azure & Office365 security, more particularly on Azure OS factory\Containers security, Vulnerability Management to comply with Cobra (SG Program), SecDevOps, SG NIST new Cloud controls and growing PowerBI\PowerPlatform interest and requests from business.
Description of tasks
· Functional Area:
- Security assessment of Azure and Office 365 (mainly PowerBI/PowerPlatform) Cloud services
- Design secure architecture for mutualized services (OS Factory, Containers infrastructure,...)
- Good practices, processes definition and documentation
- Acceptance test and compliance review on Azure policies
- Support DevOps teams on security improvements on their applications (SecDevOps)
- Monitoring, reporting and continual improvement on Cloud security
- Security Incident management on Cloud scope
- Access Control management
· List of actions:
- Assess Cloud services (Azure/Office365) security
- Formalize security assessment and propose improvements
- Participate to Cloud security architecture design
- Participate to Azure policies compliance review and remediation follow-up
- Support DevOps teams on policies compliance and security improvements of their Cloud environments
- Participate to process definition, implementation and documentation
- Participate on monitoring and reporting of Cloud security
- Participate to security Incident management on Cloud scope
- Represent Cloud Cybersecurity in meetings and committees
· Deliverables:
- Cloud services risk assessment
- Cloud Security improvement recommendations
- Secure Cloud architecture design
- Azure policies acceptance test evidences
- Azure policies compliance reports
- Meetings and committees minutes
- Security incident post mortem
- Follow up and monitoring reports
- Process definitions and workflows
- Dashboards
