Manager - Cloud Security Engineering and Operations

Grant Thornton Global Delivery Center Poland (GDC) is a multinational delivery center contributing to audit, assurance, tax, and advisory services within the global Grant Thornton International Ltd (GTIL) network, operating in over 150 markets. GDC supports operations of a growing multinational platform, providing opportunities to work on complex projects, advanced technologies, and cross-country collaboration.

• Minimum eight years of experience in infrastructure or security engineering, with at least two years in a managerial or team lead role.
• Deep hands-on experience securing major public clouds such as Microsoft Azure, Amazon Web Services, or Google Cloud Platform, including identity and access management, network controls, and encryption.
• Practical knowledge of cloud security posture management, workload protection tooling, and container/Kubernetes security.
• Experience with infrastructure as code and pipeline automation tools like Terraform, Bicep, ARM, CloudFormation, or equivalents.
• Experience with policy as code enforcement.
• Fluency in both Polish and English.

Preferred Qualifications:

• Certifications such as Microsoft AZ-500, AWS Certified Security – Specialty, CCSP, or CISSP.
• Experience with multi-cloud environments, cloud detection engineering, and mapping cloud controls to standards like CIS Benchmarks, ISO 27001, or SOC 2.

Team Leadership:

• Lead a distributed team of cloud security engineers, including work allocation, on-call coverage, performance feedback, and technical development.

Cloud Security Platform Management:

• Own the cloud security platform roadmap across posture management, workload and container protection, and cloud-native detection tooling, from selection through deployment and lifecycle.
• Operate assigned security platforms as a service, including capacity planning, patching, upgrades, health monitoring, and vendor case management.
• Automate repetitive configuration and operational tasks; treat platform configuration as code when tooling supports it.

Security Controls and Compliance:

• Define and enforce preventive guardrails and secure baselines as code.
• Drive measured reduction of misconfiguration, drift, and excessive entitlements across all subscriptions and accounts.
• Partner with cloud platform, infrastructure, and application engineering teams to embed security controls into landing zones, pipelines, and infrastructure as code templates.
• Maintain runbooks, architecture diagrams, and control documentation satisfying internal audit and external assessments.
• Support incident response and forensic investigations with platform expertise, evidence, and rapid containment actions.
• Participate in on-call rotation and scheduled change windows, including occasional work outside standard business hours.

Reporting and Support:

• Report on cloud control coverage, exception status, and remediation progress to security leadership.
• Support internal audit, regulatory, and client assurance requests.