Cloud Security (Wiz Admin)

About the Role The Cloud Security (Wiz Admin) role is responsible for administering, operating, and optimising Aviva's Wiz Cloud Security Posture Management platform. The administrator will drive operational excellence, support engineering teams, integrate Wiz into enterprise tooling, and maintain policy compliance and posture improvement. What You'll Do

• Platform Administration & Operations: Manage day-to-day administration of the Wiz platform across all cloud environments; maintain Wiz connectors, least-privilege roles, integration points, and scanning configurations; ensure onboarding/offboarding of cloud accounts, subscriptions, and K8s clusters; monitor platform health, ingestion coverage, API integrations, and license utilisation.
• Cloud Posture Management: Review, tune, and maintain security policies, controls, and baselines; validate and enhance attack path analysis, identity risk detection, and data exposure mapping; prioritise findings using impact-based and exploit-path-based logic; partner with Cloud Platform teams to ensure guardrails remain aligned with Wiz detections.
• Shift-Left Enablement: Work with DevOps/SRE teams to embed Wiz in CI/CD pipelines for IaC scanning; run onboarding sessions for teams on using Wiz Issues, Projects, and Policy-as-Code; validate false positives/negatives and fine-tune policy gates for Terraform, ARM/Bicep, and CloudFormation.
• Incident & Risk Handling: Support Cloud Security, SOC, and IR teams during investigations involving publicly exposed, exploitable, or high-risk cloud assets; provide expert analysis on Wiz findings and attack paths; propose remediation and compensating controls; contribute to post-incident reviews, root-cause analysis, and long-term posture improvements.
• Integrations & Automation: Maintain integrations with Jira/ADO, SIEM/SOAR, Slack/Teams, and CMDB/GRC; automate workflows for enrichment, prioritisation, ticketing, and reporting; partner with Engineering to build auto-remediation playbooks for safe-to-fix classes.
• Governance, Reporting & Compliance: Produce monthly security posture reports for leadership and Risk/Compliance teams; track KPIs; support external and internal audit requests using Wiz's evidence and compliance modules; manage exceptions/waivers and ensure they are reviewed and retired on schedule. What We're Looking For
• Core Technical Skills Required: Strong understanding of AWS, Azure, and GCP security controls and architecture; hands-on experience with cloud IAM, network security, logging/monitoring, and workload security; familiarity with Kubernetes security and container image scanning; experience operating cloud security platforms; working knowledge of Infrastructure-as-Code; understanding of identity and entitlements management; ability to analyse cloud attack paths and map misconfigurations to real exploitable risk. Nice-to-Have
• Nice-to-Have Skills Required: Experience integrating security tools into CI/CD pipelines; knowledge of SAST/DAST/Secret scanning tools; exposure to SRE or Cloud Platform engineering.