IT Technical Consultant - Security & Authorization Specialist

We are looking for a Senior Security Specialist to lead security governance efforts across PT and strengthen our cloud security posture, especially in Microsoft Azure environments.

Our ideal candidate has a strong foundation in security governance (e.g., frameworks, policies, vulnerability management) and working experience with cloud security. However, we are also open to experienced cloud security experts who are eager to expand into governance and compliance responsibilities.

This role is critical in aligning security strategy with business and regulatory requirements, supporting secure cloud operations, and collaborating with both internal stakeholders and external security consultants.

Key Responsibilities

Security Governance (Primary Focus)

► Define and implement the department’s security governance strategy, aligned with internal policies and industry standards (e.g., NIST CSF, ISO 27001).

► Coordinate vulnerability management programs, including prioritization, remediation tracking, and risk reporting.
► Oversee the development and enforcement of security policies, standards, and procedures.
► Support compliance audits and risk assessments, translating technical risks into business terms.

Cloud Security (Secondary Focus / Optional Priority)

► Collaborate with cloud teams to enhance Azure security posture, implement controls, and maintain visibility.

► Contribute to secure configuration and management of Azure services, including Defender for Cloud, Sentinel, Azure Policy, RBAC, PIM, and monitoring tools.
► Provide guidance during cloud security incidents and support incident response coordination and root cause analysis.
► Support security by design in cloud-based projects and deployments.

Communication

► Serve as a bridge between security consultants, engineering teams, and business stakeholders.

► Resolve incidents, especially those involving cloud platforms or external threats.
► Present complex security topics clearly to both technical and non-technical audiences.
► Support a culture of continuous improvement, risk awareness, and accountability in security practices.