Description

Own GCP security controls, architecture reviews, and risk assessments for cloud infrastructure and AI systems. Implement encryption, IAM, and data protection policies while supporting audits and remediation efforts.

This role is on-site.

Responsibilities

• Review and enforce security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.
• Implement Sentinel policies for encryption standards and database activity monitoring with blocking rules in GCP.
• Assess AI-specific risks including prompt leakage, model input/output handling, and knowledge store access.
• Review application architecture, APIs, and data flows to identify security risks and evaluate sensitive data handling for PII and financial data.
• Produce findings reports with risk ratings, gaps, and remediation recommendations, and track their implementation.

Required Skills

• 9+ years of experience in cloud security architecture, preferably on Google Cloud Platform.
• Hands-on knowledge of GCP IAM, VPC, Shared VPC, Cloud Run, GKE, BigQuery, Cloud Storage, Datastore, Firestore, Cloud KMS, and Secret Manager.
• Experience assessing and implementing encryption, DLP, and data activity monitoring (DAM) controls.
• Strong understanding of identity and access management, RBAC, segregation of duties (SoD), and privileged access.
• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Understanding of logging, SIEM integration, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.
• Ability to collaborate with cybersecurity, enterprise architecture, and application teams.

Preferred Skills

• Hands-on experience with security automation using Java or Python.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Familiarity with vulnerability management and risk assessment methodologies.

Key Skills

Education

Bachelor's degree