Description

You will own cloud security governance, risk, and compliance operations for multi-cloud environments. You bridge technical security controls with audit requirements to maintain regulatory standing.

Responsibilities

• Execute risk assessments and control testing against CIS Benchmarks and Cloud Control Matrix (CCM) standards.
• Support security audits by collecting evidence, maintaining documentation, and generating compliance reports.
• Monitor regulatory changes impacting cloud infrastructure and update control frameworks accordingly.
• Track remediation activities and perform gap analysis to ensure security compliance across AWS, Azure, and GCP.
• Assist in validating identity and access management (IAM) policies and data protection measures.

Required Skills

• 6+ years of experience in cloud security, GRC, or security engineering roles.
• Professional certifications: Security+, CISA, or CCSP.
• Hands-on understanding of multi-cloud platforms: AWS, Azure, and GCP.
• Practical knowledge of containerization (Docker) and orchestration (Kubernetes).
• Experience with vulnerability management, incident response, and software-defined networking concepts.
• Ability to perform gap analysis and remediation tracking for security controls.
• Strong documentation skills for audit support and compliance reporting.

Preferred Skills

• Experience with serverless computing architectures in cloud environments.
• Familiarity with high availability architecture design patterns.

Key Skills

Education

Any Gradute