Head of Infrastructure & Cloud Security

We are seeking a Head of Infrastructure & Cloud Security to lead and develop our security operations across cloud, network, identity, endpoint, and data domains. In this role, you will design and enforce security protocols in a hybrid environment, lead a team of security engineers, promote a cloud-first approach, and report on enterprise security metrics

Responsibilities

Shape and oversee the infrastructure and cloud security strategy, reporting directly to the CISO

Hire, lead, mentor, and develop security engineers and team leads

Define and enforce enterprise security guardrails, approving low/medium-risk platform exceptions

Manage and lead CSPM/CNAPP/CWPP, WAF, DNS security, and IaC scanning across cloud environments

Collaborate with Platform and SRE teams to manage cloud IAM and security-group guardrails

Enhance and manage endpoint security across managed devices, including hardening and telemetry health

Own data security and cryptography controls, including KMS, secrets management, PKI, and certificate lifecycle

Track, analyze, and report enterprise security metrics

Requirements

Proven experience in leading security engineers and managing teams

Hands-on experience in cybersecurity engineering

Strong experience in securing on-premises infrastructure in an enterprise environment

Experience with any major cloud provider

Proficiency in cloud and network security, including CSPM/CNAPP/CWPP tools, WAF, DNS security, and IaC scanning

Experience with EDR/XDR and MDM solutions

Understanding of identity and access management, including cloud IAM and security-group guardrails

Experience with KMS, secrets management, PKI, and certificate management

Ability to enforce security controls without hindering delivery for Platform/SRE/DevOps teams

Will be a plus

Experience in building or maturing an infrastructure/cloud security function from an early stage

Background in fintech, brokerage, trading platforms, payments, or regulated environments

Knowledge of Kubernetes/container security and cloud-native architectures

Exposure to SOC 2, ISO 27001, or DORA compliance frameworks

Familiarity with security tools such as Wiz, Panorama, Elastic Defender, Entra, or CyberArk

We offer

15 paid vacation days off year

10 paid sick leave per year

Public holidays as per the company's approved Public holiday list

Medical budget

Opportunity to work remotely

Professional educational budget

Language learning budget

Wellness budget (gym membership, sport gear and related expenses)