Cyber Security Consultant - CSRO

Cyber Security Consultant – CSRO Company Profile: At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve. At CGI, we’re a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed. We have the global resources, expertise, stability and dedicated professionals needed to achieve results for our clients - and for our members. Come grow with us. Learn more at www.cgi.com. This is a great opportunity to join a winning team. CGI offers a competitive compensation package with opportunities for growth and professional development. Benefits for full-time, permanent members start on the first day of employment and include a paid time-off program and profit participation and stock purchase plans. We wish to thank all applicants for their interest and effort in applying for this position, however, only candidates selected for interviews will be contacted. No unsolicited agency referrals please. Job Title: Cyber Security Consultant – CSRO Position: Cyber Security Consultant – CSRO Experience: 8+ Years Category: IT Infrastructure Main location: Bangalore/Chennai Position ID: J0726-2590 Employment Type: Full Time Job Summary We are seeking a Cloud Security Engineer with a strong focus on AWS security governance and guardrails enforcement. This role emphasizes policy driven security, risk identification, and automated enforcement across complex enterprise environments using policy as code and IaC frameworks. Key Responsibilities . Design and enforce AWS security guardrails using SCPs, IAM policies, AWS Config, and Security Hub . Implement preventive and detective controls aligned with enterprise security standards . Enforce Zero Trust and least privilege principles across cloud workloads . Perform continuous risk assessments to identify misconfigurations, access risks, and security gaps, and drive remediation . Develop and manage security policies as code using JSON/YAML based frameworks . Enforce controls consistently through AWS policies, Config rules, Terraform modules, and ARM templates . Maintain version controlled, reusable policy frameworks for scalable governance . Enable continuous compliance monitoring, drift detection, and automated remediation . Utilize Cortex (Prisma Cloud) / Wiz for cloud security posture management, threat detection, and risk prioritization . Translate risk findings into actionable guardrails and enforceable controls . Improve overall security coverage across cloud assets using a risk based approach . Build secure by default Terraform modules for AWS environments . Use Python and scripting to automate security enforcement, compliance validation, and remediation workflows . Integrate security into CI/CD pipelines (GitHub Actions) to enable shift left enforcement . Drive an automation first approach to support agile, consistent security enforcement at enterprise scale . Support governance in Azure using Azure Policies and ARM templates as needed Skills Required: Strong AWS security expertise (IAM, SCPs, Config, Security Hub).Experience with policy as code and automated security enforcement.Hands on with Terraform, ARM templates, and JSON based policies.Familiarity with Cortex / Wiz (CNAPP tools).Proficiency in Python / scripting and CI/CD (GitHub Actions).Solid understanding of risk assessment, Zero Trust, and compliance frameworks. Nice to Have Azure security exposureAWS Security Specialty certification This keeps it tight, security led, and enterprise focused, while clearly emphasizing: Guardrails & enforcement Policy as code (JSON/Terraform/ARM) CNAPP (Cortex/Wiz) + risk based approach Automation for large scale environments Preferred Qualifications: We are looking for a Cloud Security Engineer with strong development and automation skills. The ideal candidate should have: . Hands on experience with Azure and AWS services to perform risk assessments and implement security guardrails. . Ability to develop and enforce security policies using CSPM/CNAPP . Strong Infrastructure as Code skills with Terraform and ARM templates for secure deployments. . Proficiency in PowerShell scripting . Knowledge of Zero Trust principles, least privilege access, and integration of security controls into CI/CD pipelines.

Together, as owners, let’s turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction. Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals. Come join our team—one of the largest IT and business consulting services firms in the world.