Ekco interview preparation.

Strong knowledge of identity, network, platform, application, data, security operations and resilience controls, including Zero Trust and shared-responsibility principles.

Hands-on experience with cloud governance, landing zones, multi-account or multi-subscription operating models, Infrastructure as Code, and DevSecOps delivery using tools such as Terraform, AWS CloudFormation, Bicep, GitHub Actions, AWS CodePipeline, or Azure DevOps.

Experience applying regulatory and security requirements such as GDPR, NIS2, DORA, ISO 27001, NIST, CIS, CSA and OWASP to cloud environments.

Hands-on experience with Microsoft security technologies such as Microsoft Defender XDR, Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Entra ID and Microsoft Purview.

Experience assessing client environments and translating business, risk and regulatory requirements into security designs, implementation plans and remediation roadmaps.

Practical experience with Infrastructure as Code using Bicep and/or Terraform, together with an understanding of source control, CI/CD pipelines and governed deployment practices.

Proven experience writing IT SOPs or IT quality procedures in a GxP environment.

Experience with IT change control, CAPA and deviation processes.

Experience documenting cloud and SaaS controls, including supplier qualification and shared responsibility models for GxP systems.