Head of Public Cloud Security & Compliance

Head of Public Cloud Security & Compliance

With a global team of 5600+ IT professionals, DHL IT Services connects people and keeps the global economy running by continuously innovating and creating sustainable digital solutions. We work beyond global borders and push boundaries across all dimensions of logistics. You can leave your mark shaping the technology backbone of the biggest logistics company of the world. All our locations have earned the #GreatPlaceToWork certification, reflecting our commitment to exceptional employee experiences.

Digitalization. Simply delivered.
At IT Services, we are passionate about secure cloud transformation. Our Cloud Security, Compliance & Resilience team within Secure Public Cloud Services is continuously evolving. As Head of Cloud Security & Compliance, you will lead a global team and ensure that public-cloud services are secure, compliant, resilient and ready to support business growth, and always grow within our diverse environment.

#DHL #DHLITServices #GreatPlace

Grow together
You will own the Public Cloud Security, Compliance & Resilience agenda for Secure Public Cloud Services and create the conditions for teams to deliver securely at scale. You will set direction, lead specialists and translate technical and regulatory risks into clear priorities, investment decisions and measurable outcomes.

Timely delivery of DHL packages around the globe in a way that ensures customer data are secure is the core of what we do. You will be responsible holistically for secure design, operations and compliance of Secure Public Cloud Services. With the team of highly skilled security experts, you will ensure the architecture of our enterprise grade services is secure, compliant and the day-to-day operational in terms of incident handling, vulnerability management is world class. In this role you will be a partner with senior stakeholders in the DHL Group like division CISOs and colleagues from other IT Services departments like platform owners or engineering teams to make our services every day a bit better.

• Own the cloud security strategy, roadmap, governance model, and control baselines. Define accountability, prioritize investment and delivery, and report security risks, compliance status, and remediation progress to senior stakeholders.
• Lead and develop a multinational team, establish clear objectives, and manage capacity, service quality, and vendor performance across regions.
• Define security architecture standards and lead design reviews for cloud platforms and workloads, covering identity, privileged access, network segmentation, private connectivity, data protection, encryption, and logging.
• Oversee continuous cloud security monitoring, threat detection, and incident response coordination with the SOC and service teams. Strengthen detection coverage, response playbooks, escalation procedures, and corrective actions following incidents.
• Own cloud security posture management and workload protection capabilities, including Prisma Cloud or equivalent platforms. Drive policy tuning, vulnerability prioritization, and risk-based remediation with accountable service owners.
• Oversee Kubernetes and container security across AKS, GKE, and OpenShift, embedding security controls into infrastructure as code and delivery pipelines.
• Maintain cloud security policies and control frameworks aligned with ISO/IEC 27001, SOC 2 Type II criteria, GDPR, NIS2, and other applicable regulatory, contractual, and internal requirements.
• Lead continuous compliance monitoring and control effectiveness assessments. Coordinate audits and access reviews, maintain evidence, and track findings and exceptions through remediation or formally authorized risk acceptance.
• Work with platform and service owners to define and validate backup and disaster recovery controls, ensuring recovery testing demonstrates alignment with agreed recovery time and recovery point objectives.
• Guide security assessments of cloud AI services, addressing identity, endpoint exposure, data access, and monitoring. Drive practical automation to improve security operations, identity governance, and compliance assurance.

Ready to embark on the journey? Here’s what we are looking for:
As Head of Cloud Security & Compliance, you bring substantial experience leading cloud or infrastructure security in a complex global enterprise. You combine strategic leadership with sufficient technical depth to challenge designs, guide incident and risk decisions, and work credibly with engineering and operations teams. You will bring proven leadership experience across Security Operations, Security Architecture, and Governance, Risk, and Compliance. Strong technical expertise in Azure and Google Cloud, alongside the ability to govern security across AWS and Oracle Cloud Infrastructure, is essential. Your experience should cover cloud security posture management and workload protection, IAM and privileged access, Kubernetes and container security, secure network architecture, and incident response.

You should also have practical experience translating ISO/IEC 27001, SOC 2 Type II criteria, GDPR, NIS2, and other applicable requirements into effective controls, continuous compliance monitoring, and audit evidence. Experience with disaster recovery assurance, infrastructure as code, and secure delivery pipelines is important, while knowledge of AI security and automation would be an advantage. Strong people leadership, stakeholder management, and the ability to communicate technical risks clearly to senior management will be integral to your success.

Required Education, Skills, Experience

• Bachelor’s or Master’s degree in Computer Science, Data Engineering, Information Systems, Business Administration or a related discipline.
• Minimum of 15+ years of overall experience and atleast 5 year in a Leadership role.
• Excellent communication and stakeholder management skills in English.
• Strategic mindset with a hands-on approach to problem-solving and innovation.
• Proactive, detail oriented, and effective in cross functional team environments.

An array of benefits for you:

• Hybrid work arrangements to balance in-office collaboration and home flexibility.
• Annual Leave: 42 days off apart from Public / National Holidays.
• Medical Insurance: Self + Spouse + 2 children. An option to opt for Voluntary Parental Insurance (Parents / Parent -in-laws) at a nominal premium covering pre existing disease.
• In House training programs: professional and technical training certifications.