Role summary
The Security Account Manager (SAM) serves as a trusted security advisor and engagement lead for a portfolio of strategic, high-visibility customers and has a Cloud Based Security Background. This role combines a consulting-style approach with ongoing account security governance. The SAM partners with Sales, Customer Success, Support, Cloud Operations, and Product/Security teams to reduce risk, improve customer security posture, and drive adoption of cloud security best practices.
Key Responsibilities
•Act as the primary security point of contact for assigned strategic/critical accounts.
•Build multi-threaded relationships with customer security leadership (CISO org), IT, risk/compliance, and engineering teams.
•Lead security governance cadences (e.g., monthly/quarterly) including security posture reviews, risk discussions, and roadmap alignment.
•Conduct discovery to understand customer environments, threat models, regulatory requirements, and business priorities.
•Advise on cloud security controls and best practices: IAM/SSO/MFA, least privilege, key management/encryption, network segmentation, logging/monitoring, vulnerability management, configuration baselines, and secure SDLC.
•Partner with internal security specialists to address complex topics (e.g., crypto/KMS/HSM, workload isolation, data residency, Zero Trust)
Qualifications
•Demonstrates strong understanding of cloud architecture (and products – OCI, AWS, Azure, etc.) and can clearly describe components, data flows, trust boundaries, and shared responsibility across IaaS/PaaS/SaaS. Able to translate architecture into security posture implications, risks, and recommended controls for enterprise customers.
•Background in security consulting (Big5 Type), cloud security architecture, or enterprise risk/GRC for regulated industries
•Security certifications (one or more): CISSP, CISM, CCSP, GIAC, ISO 27001 LI/LA (as relevant)
•Experience with complex escalations and cross-functional leadership in matrixed organizations
•Familiarity with customer security assurance processes (questionnaires, audit requests, pen test coordination, attestations
•Experience 10+ years
• Regulatory knowledge about data protection requirement locally (APAC regions)
• English and Japanese languages required
• Australia or /New Zealand or / Japan based candidate preferred
