Cloud Security Officer

About the role

An international IT and technology-services organisation supporting banks and financial institutions with end-to-end technology solutions is hiring a Cloud Security Officer in Skopje, North Macedonia. The role assesses, designs and oversees security controls across enterprise cloud environments, combining hands-on cloud security with second-line information-security oversight. It sits within the Information Security and Risk Management function and works closely with engineering, software development, application owners, project teams and business stakeholders.

Key responsibilities

• Investigate and analyse existing cloud environments and identify opportunities to strengthen their security.
• Assess proposed and existing cloud solutions, identify risks and recommend practical, proportionate controls.
• Design, oversee and continuously improve cloud-security controls and security solutions.
• Collaborate with engineering and software development teams to embed security best practices throughout the development and technology lifecycle.
• Identify security gaps and vulnerabilities, support remediation and track issues to resolution.
• Manage and run processes for information protection and cloud security, including documentation, tool integration, gap assessment and continuous improvement.
• Prepare for and conduct internal security reviews and audits against internal requirements and recognised international standards.
• Analyse cloud-security trends, threats and best practices and give recommendations.
• Operate in a second-line security function, providing independent oversight, challenge and guidance to technical teams.

Required profile

• Solid foundations in information security and a good understanding of security defence principles.
• Ability to assess technical solutions, identify risks and turn findings into clear, proportionate recommendations.
• Strong analytical and problem-solving skills, with the ability to own security topics through to resolution.
• Clear documentation of assessments, controls, risks, decisions and recommendations.
• Strong communication and collaboration skills across technical, security and business teams.
• Proactive mindset and willingness to keep learning as cloud platforms and threats evolve.

Required skills

• Practical experience with Microsoft Azure and Microsoft 365 security.
• Working knowledge of Entra ID, Azure RBAC, Conditional Access, PIM and managed identities.
• Experience or strong familiarity with Intune, Microsoft Defender, Microsoft Purview/DLP and CSPM.
• Advantageous: Azure or information-security certifications, PowerShell, banking or regulated-environment experience, and ISO 27001, PCI DSS and GDPR experience.

What we offer

• A hybrid working model.
• Flexibility and autonomy, a flat management structure and close cross-team collaboration.
• Long-term prospects with professional development and growth.
• Opportunities for business travel.