Senior Microsoft Cloud & Platform Security Lead

Introduction

12 Month Contract | Hybrid - JHB | Senior Microsoft Cloud & Platform Security Lead: to drive and own the security posture across Microsoft 365, Azure, and hybrid cloud environments. This role is responsible for defining security standards, improving cloud security maturity, leading incident response for complex security events, and ensuring Microsoft security platforms align with industry best practices and regulatory requirements.

Job Description

• ​​​​​​Lead the security strategy and technical direction for Microsoft Azure, Microsoft 365, and hybrid cloud platforms.

• Design, implement, and continuously improve security controls across Microsoft Defender, Sentinel, Entra ID, Azure, and Microsoft security services.

• Define and maintain cloud security standards, technical baselines, and governance aligned with CIS, NIST, ISO 27001, and organisational security policies.

• Monitor and improve Microsoft Secure Score and overall cloud security posture through regular assessments and gap analysis.

• Act as the senior escalation point for critical Microsoft platform security incidents, coordinating containment, forensic investigations, and recovery with Security Operations teams

• Provide governance for Azure Key Vault, PKI, GitHub Advanced Security, DevSecOps security controls, Microsoft Copilot security, and Power Automate governance.

• Provide technical leadership, mentoring, and guidance to cloud security engineers and broader cyber security teams

• Evaluate emerging Microsoft security technologies and recommend enhancements to improve resilience, compliance, and operational efficiency.

• Ensure security controls meet regulatory, audit, and enterprise governance requirements while supporting business objectives.

Minimum Requirements

• Bachelor's Degree in Information Technology, Computer Science, Cyber Security, or a related field.

• Minimum 8–10 years' experience in Cyber Security, Cloud Security, or Infrastructure Security.

• At least 5 years' hands-on experience securing Microsoft Azure and Microsoft 365 environments.

• Extensive experience with:

• Microsoft Defender Suite (Endpoint, Office 365, Identity, Cloud Apps)

• Microsoft Sentinel (SIEM/SOAR)

• Microsoft Defender XDR

• Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection, and Privileged Identity Management (PIM)

• Azure Security Centre / Defender for Cloud

• Azure RBAC, NSGs, Security Policies, and Azure Governance

• Microsoft Purview, DLP, and Sensitivity Labels

• Azure Key Vault and PKI Governance

• GitHub Advanced Security and DevSecOps security controls

• Strong understanding of Microsoft Secure Score and cloud security posture management.

• Experience designing enterprise cloud security architectures and governance frameworks.

• Knowledge of security frameworks including NIST, CIS Controls, ISO 27001, and cloud security best practices.

• Experience leading major security incidents, investigations, and remediation activities.

• Excellent stakeholder management, leadership, mentoring, and communication skills

Package & Remuneration

Salary Market Related