London
Wiz Admin JD: Role Purpose The Cloud Security (Wiz Admin) is responsible for administering, operating, and optimising Aviva's Wiz Cloud Security Posture Management (CSPM/CNAPP) platform. This role ensures continuous visibility, governance, and risk reduction across Aviva's multi-cloud environments (AWS, Azure, GCP). The administrator will drive operational excellence, support engineering teams, integrate Wiz into enterprise tooling, and maintain policy compliance and posture improvement Key Responsibilities Platform Administration & Operations • Own day-to-day administration of the Wiz platform across all cloud environments., • Maintain Wiz connectors, least-privilege roles, integration points, and scanning configurations., • Ensure onboarding/offboarding of cloud accounts, subscriptions, and K8s clusters., • Review, tune, and maintain security policies, controls, and baselines (eg, CIS, NIST, ISO)., • Validate and enhance attack path analysis, identity risk detection, and data exposure mapping., • Prioritise findings using impact-based and exploit-path-based logic., • Work with DevOps/SRE teams to embed Wiz in CI/CD pipelines for IaC scanning., • Run onboarding sessions for teams on using Wiz Issues, Projects, and Policy-as-Code., • Support Cloud Security, SOC, and IR teams during investigations involving publicly exposed, exploitable, or high-risk cloud assets., • Provide expert analysis on Wiz findings and attack paths; propose remediation and compensating controls., • Maintain integrations with Jira/ADO, SIEM/SOAR, Slack/Teams, and CMDB/GRC., • Automate workflows for enrichment, prioritisation, ticketing, and reporting., • Produce monthly security posture reports for leadership and Risk/Compliance teams., • Track KPIs (coverage, MTTR, SLA adherence, risk trends)., • Support external and internal audit requests using Wiz's evidence and compliance modules., • Strong understanding of AWS, Azure, and GCP security controls and architecture., • Hands-on experience with cloud IAM, network security, logging/monitoring, and workload security., • Familiarity with Kubernetes security and container image scanning., • Experience operating cloud security platforms (Wiz preferred; alternatives: Prisma, Lacework, Defender for Cloud)., • Working knowledge of Infrastructure-as-Code (Terraform strongly preferred)., • Understanding of identity and entitlements management (CIEM)., • Experience integrating security tools into CI/CD pipelines (Azure DevOps, GitHub, GitLab)., • Knowledge of SAST/DAST/Secret scanning tools., • Strong communication skills-able to simplify complex findings for engineering teams., • Problem-solving mindset with a bias for automation and scalability., • Ability to work cross-functionally with Security, Cloud Platform, DevOps, Risk, and Audit., • Comfortable with influencing teams without formal authority.