Morgan Stanley
Lead GCP Security Controls Engineer - VP
Alpharetta, Georgia · On-site · Director · Full-time · Posted Oct 8, 2026
- Experience
- 5+ years; no alternatives stated.
- Education
- Bachelor’s degree in computer science, Information Security, or a related field, or equivalent experience.
About the job
Leads hands-on design, implementation, testing, and operation of GCP-native security controls and remediation workflows across enterprise cloud environments.
What you'll do
- Build and operate preventive, detective, and corrective GCP security controls, including organization policies and runtime monitoring.
- Translate security, risk, and regulatory requirements into automated, testable policies and remediation workflows.
- Set technical standards, review implementations, mentor engineers, and partner with platform, application, and risk teams.
What they ask for
- Bachelor’s degree in computer science, Information Security, or a related field, or equivalent experience.
- 5+ years of hands-on cloud security, platform security, security engineering, or cloud control engineering experience.
- Production experience implementing GCP security controls, including policy authoring, testing, deployment, and operational support.
- Experience with GCP organization policies and relevant native security capabilities; ability to translate security requirements into control logic and tests.
Nice to have
- Experience with policy-as-code technologies such as OPA/Rego, Conftest, or Terraform policy frameworks.
- Experience with runtime/CSPM controls, CI/CD security checks, event-driven remediation, or relevant GCP certification.
Tools
GCP, IAM, VPC Service Controls, Security Command Center, Cloud Logging, OPA/Rego, Conftest, Terraform
Model-written summary · the original posting is authoritative