Overview
The Platform Engineer will support a prominent digital consumer brand by ensuring compliance with the CAF 4 framework through a combination of cloud security remediation and compliance documentation. This role will primarily involve working in AWS, with some engagement in GCP, and will require close collaboration with internal teams and stakeholders to manage security controls effectively and communicate progress on compliance initiatives.
Responsibilities
- Assess current security controls and identify necessary remediation to meet CAF 4 compliance objectives.
- Implement changes across AWS infrastructure and GCP as needed, focusing on IAM, MFA, network segmentation, and TLS/encryption.
- Produce clear, audit-ready documentation to support compliance outcomes.
- Work with internal teams and third-party suppliers to validate shared security responsibilities.
- Provide weekly progress updates to senior stakeholders, highlighting risks, blockers, and delivery status.
- Focus on supply chain risk management and third-party threat management.
- Ensure effective access control and data protection measures are in place.
- Manage incident recovery and evidence handling processes, including backups and chain of custody.
Requirements
- Strong hands-on experience securing AWS environments; working knowledge of GCP is beneficial.
- Experience delivering against cybersecurity and compliance frameworks, such as CAF, NIS, or ISO 27001.
- Solid understanding of IAM, MFA, logging, monitoring, backup, and network segmentation.
- Experience producing technical and compliance documentation for senior stakeholders.
- Ability to operate effectively in a fast-paced delivery environment with immediate impacts.
- Strong stakeholder communication skills.