Description

You will own cloud infrastructure compliance, governance automation, and audit readiness.

This role is remote.

Responsibilities

• Own the end-to-end compliance lifecycle for cloud infrastructure, ensuring alignment with SOC 2, ISO 27001, NIST, and CIS benchmarks.
• Translate compliance requirements into enforceable Azure Policy definitions, Terraform validation rules, and automated guardrails.
• Design and implement automated workflows for evidence collection, risk prioritization, and audit remediation using Azure-native tools.
• Operate and optimize CSPM tooling (Wiz) to identify misconfigurations and drive remediation with engineering teams.
• Develop AI/LLM-driven tools to accelerate governance workflows, including automated control mapping and intelligent evidence summarization.

Required Skills

• 5+ years of experience in cloud governance, risk, and compliance (GRC).
• Strong proficiency with Azure Policy, Azure Monitor, Azure Workbooks, Microsoft Defender for Cloud, and Management Groups.
• Hands-on experience with GRC platforms such as ServiceNow GRC or Archer.
• Deep understanding of CSPM tools like Wiz, Prisma Cloud, or Orca for vulnerability detection and compliance scanning.
• Solid understanding of Terraform; ability to review, review, and recommend changes to HCL modules to enforce compliance.
• Automation skills using Python, PowerShell, or Bash for evidence collection and reporting.
• Experience with AI/LLM application development, including prompt engineering, RAG patterns, or agent-based automation.

Preferred Skills

• Experience with IT audit processes, including scoping controls, gathering evidence, and driving remediation.
• Knowledge of FedRAMP and internal control mapping methodologies.

Referral Bonus: ₹50,000

Key Skills

Education

Bachelor's degree