Senior Cloud Cyber Defense Analyst

Description

Job Summary: Lead governance, implementation, and evolution of cyber defense for cloud environments and functional administration of the CNAPP platform. Key Highlights: 1. Lead the implementation and evolution of the CNAPP platform. 2. Promote cloud security best practices. 3. Coordinate regional security initiatives. **Credicorp Capital** invites you to turn challenges into opportunities and become our next **Agile Team Coach**, based in **Lima, Peru**. **Mission**: Lead the governance, implementation, and evolution of cloud cyber defense capabilities through functional administration of the CNAPP platform, strengthening the organization’s security posture via risk management, control monitoring, coordination of regional initiatives, and adoption of best practices aligned with business strategic objectives. **Key Responsibilities**: * Lead the implementation, administration, and functional evolution of the CNAPP platform in coordination with regional Cyber Defense, Cloud, Infrastructure, and Architecture teams. * Define, document, and maintain up-to-date the operational model, procedures, standards, and guidelines associated with CNAPP platform governance. * Continuously monitor cloud environment security posture through analysis of configurations, identities, vulnerabilities, workloads, and exposure of technological assets. * Prioritize and coordinate remediation of vulnerabilities and security findings based on criticality, business impact, and risk exposure. * Coordinate regional initiatives with Cloud Engineering, DevSecOps, Infrastructure, Development, Architecture, COEs, Tribes, and specialized vendors to ensure effective implementation of security controls. * Evaluate new capabilities, integrations, and functionalities to strengthen the cyber defense strategy and protection of cloud environments. * Monitor and analyze performance indicators related to vulnerabilities, monitoring coverage, control compliance, and cloud security maturity, generating executive insights for decision-making. * Promote adoption of cloud security best practices through training, technical advisory, and knowledge transfer to involved teams. **Requirements**: Professional degree in Systems Engineering, Computer Engineering, Telecommunications Engineering, Cybersecurity, or related fields. Desirable specialization or training in: * Cybersecurity. * Cloud Computing. * Information Security. * Technological Risk Management. * IT Governance. **Experience**: Minimum three (3) years of experience performing duties related to: * CNAPP platform administration. * Vulnerability management. * AWS or Azure security or infrastructure management (Cyber Defense/Cloud Security). * Information security. * Technological risk. * Advanced Excel (data analysis, modeling, and reporting). * Operational use of cloud platforms (AWS or Azure). * Power BI / Tableau or other visualization tools. * Collaborative tools (Jira, Confluence, Teams, or others). **Knowledge of any of the following frameworks**: * NIST Cybersecurity Framework. * ISO/IEC 27001 and 27002. * MITRE ATT&CK. * OWASP Top 10. * COBIT and ITIL. * Technological infrastructure (servers, networks, applications, storage, and cloud services). * Identity and access security (IAM). * Workload and container security. * Cloud Native Application Protection Platform (CNAPP). * Cloud Security Posture Management (CSPM). * Cloud Workload Protection Platform (CWPP). **Desirable Experience**: * Coordination with SOC. * Hybrid infrastructure (on-premise and cloud). * Corporate environments with high availability and security requirements. * Experience in the financial sector or regulated environments. ***This recruitment is also open to persons with disabilities.***