Cloud Security

**Position Snapshot**
- Location: Nestlé Global IT HUB Assago - Milano Italy
- Full time permanent contract
- Minimum of 3+ years of specific Cloud experience as specialist or expert with a strong interest in Security topics
- Strong written and verbal communications skills in English and at all levels within the organization

**Position Summary**

In order to complete our IT Platforms Department, we are currently looking for a Cloud Security and Compliance Specialist

You will be working with the team to ensure solutions delivered through the corporate transformation portfolio, including Cloud Automation Solutions, are designed, and built securely to ensure they also address our security and compliance risks amongst other things in line with our overall Nestle security strategy. You will be establishing Cloud security processes, working on cloud policies and controls. You will be managing the governance of those controls and security activities in relation to the above. Security remediation is also a big area of focus for you as our landscape comprises of various solution types along with mergers and acquisitions.

**A Day in the Life of a Cloud Security & Compliance Specialist**
- Responsible for the embedding and continual improvement for security and compliance processes within the team.
- Influencing business priorities and control owner plans for information security improvements and risk mitigation.
- Have a mindset of continuous innovation, continuous learning and improving.
- Manage the Policy framework for the clouds.
- ** Azure experience is a must, including AWS and/or GCP desirable.**:

- **Familiar with ISO, Risk, Security and Compliance concepts relating to cloud security.**:

- Coordinates audit-related tasks, such as audits requests, and ensure the readiness of IT Product Group Managers and IT Product Managers as well as Partners and their organizations.
- Tracks and reports the compliance through relevant metrics.
- Contribute to (and where relevant own) the preparation of related reports for senior management, internal and external audits as well as external regulatory bodies as appropriate.

**What will make you successful**
- Bachelor's degree in computer science, information systems, business administration or related field, or equivalent work experience
- Minimum of 3+ years of specific Cloud experience as specialist or expert with a strong interest in Security topics, especially Azure, AWS and/or GCP (PaaS, SaaS, IaaS) in terms of solution design principles, focus on **ISO, Risk, Security and Compliance**, best practices, and compliance challenges.
- Relevant Cloud certifications highly desirable
- Strong written and verbal communications skills in English and at all levels within the organization
- Devops and agile principles work environment experience is a must.
- Experience in cloud architecting is a nice to have.
- PaaS, Docker, Kubernetes, Terraform and Serverless experience is a plus.
- Ability to write and defend technical business proposals.