Director Consulting, Cloud Security

About the Role:

Join Gartner Consulting, where insights meet execution. We partner with leaders across industries to address their most critical priorities and achieve measurable results. As a Director, Cloud Cybersecurity, you will leverage Gartner's comprehensive research and tools to design, implement, and optimize cutting-edge cloud security solutions for a rapidly evolving digital landscape.

This role offers a unique opportunity to collaborate with global enterprises, helping them navigate complex challenges while delivering innovative solutions that drive tangible business outcomes.

What You’ll Do:

• Assess and Advise: Conduct detailed cloud security assessments, ensuring alignment with industry frameworks such as NIST CSF, ISO 27001, COBIT, GDPR, HIPAA, and CMMC. Provide actionable recommendations to address gaps and enhance security postures

• Design Secure Cloud Environments: Develop and implement cloud-native security architectures for platforms like AWS, Azure, and Google Cloud, incorporating zero-trust principles, identity and access management (IAM), and data encryption strategies

• Optimize Cybersecurity Programs: Lead initiatives to improve incident response plans, vulnerability management, and compliance strategies, driving resilience against emerging threats

• Harness Emerging Technologies: Evaluate the implications of AI, machine learning, IoT, and blockchain for cloud security, incorporating these innovations into client strategies

• Deliver Client Value: Collaborate with stakeholders to identify risks, implement remediation strategies, and ensure compliance with evolving regulatory landscapes

• Develop Best Practices: Create and implement cloud security policies, IT controls, and governance frameworks tailored to organizational needs

• Educate and Empower: Train client teams on cloud security best practices, fostering a culture of proactive risk management and awareness

What You’ll Need:

• 7+ years of progressive cybersecurity experience, including 5+ years specializing in cloud security architecture, governance, and operations

• Hands-on experience designing and implementing secure architectures for leading cloud platforms, including:

  • AWS (AWS Security Hub, Identity and Access Management, Config, CloudTrail, GuardDuty)

  • Azure (Azure Security Center, Azure Policy, Microsoft Defender for Cloud)

  • Google Cloud (Cloud Security Command Center, Identity-Aware Proxy, Chronicle)

• Expertise in multi-cloud and hybrid-cloud environments, including securing workloads across diverse platforms

• Proven track record of conducting cloud security risk assessments and addressing regulatory compliance challenges for frameworks such as NIST CSF, ISO 27001, GDPR, HIPAA, PCI DSS, and CMMC

• Experience implementing zero-trust architectures, with a deep understanding of network segmentation, identity-centric security models, and real-time monitoring

• Demonstrated success in designing and managing secure CI/CD pipelines, embedding DevSecOps principles, and automating security testing

• Proficiency in container security technologies, including Kubernetes, Docker, and tools like Aqua Security, Prisma Cloud, or Sysdig

• Strong understanding of data encryption and key management solutions, with experience deploying encryption protocols such as TLS, AES, and PKI in cloud environments

• Experience with security information and event management (SIEM) tools like Splunk, Elastic Stack, or cloud-native solutions for threat detection and response

Certifications (Preferred):

• AWS Certified Security – Specialty

• Microsoft Certified: Azure Security Engineer Associate

• Google Professional Cloud Security Engineer

• Advanced certifications such as CISSP, CCSP, GIAC GCSA, GCPN, or SABSA

Technical Expertise:

• Familiarity with automation frameworks and tools, such as Terraform, Ansible, or CloudFormation, for infrastructure-as-code deployments

• In-depth knowledge of identity and access management (IAM), including policies, role-based access control (RBAC), and single sign-on (SSO) solutions

• Hands-on experience in implementing disaster recovery and business continuity plans for cloud-native environments

• Expertise in vulnerability management<