Job Responsibilities:

• Execute independent Cloud Controls to determine if controls requirements are adequately and correctly implemented by application teams across various lines of business.
• Participate in management of the overall Cloud Governance Council which serves as inputs to the cloud controls validation program.
• Assess the overall Cloud Platform Security (CPS) Programs, identify gaps in the process and recommend areas of improvement.
• As the Cloud Platform Security (CPS) first line of defense, perform content and quality assurance reviews of Cloud Controls Exceptions and provide risk-based recommendations.
• Generate routine and Ad-hoc exception reports for stakeholders which include but are not limited to Auditors, Senior Management, regulatory agencies, and others.
• Stay current on emerging Cloud computing vulnerabilities, threats, controls, and potential implications for Client
  
• Collaborate effectively with colleagues, stakeholders, lines of business to achieve Client Cloud Security objectives.
• Prepare the Cloud Platform Security (CPS) for audit readiness through coordination with IT Risk Management group.
• Participate in the testing of design effectiveness (both manually and through automation) prior to the roll out of Cloud services for enterprise-wide consumption.
• Act as the Subject Matter Expert for cloud security and tools such as Security Information and Event Management (SIEM), access control mechanisms, Intrusion Detection, and Intrusion Prevention Systems (IDS/IPS).
• Conduct assessments of security controls for new and existing cloud systems.
• Determine security modes of operation and recommend new or revised security measures and countermeasures for current security challenges.
• Collaborate with other Client IT stakeholders to continue to evolve and implement a state-of-the-art secure cloud infrastructure.

Int

SucWhat you bring:

• BS or BA degree preferably in a technology related field
• Experience with Microsoft Azure Cloud Security Solutions.
• Provisioning experience - automating enterprise-wide manual processes with a cloud platform
• Knowledgeable of SOX IT General Controls and changing control procedures
• Knowledge of network, architecture, load balancing, and mapping
• CISSP, CCSP certification or equivalent preferred
• Expert knowledge of security best practices, excellent verbal, written and presentation skills required
• Good understanding of automation technologies
• Programming experience in python/java/shell scripts/html
• 5-7 years’ experience in information technology, including solution design, implementation and ongoing operations
• Ability to resolve conflict, drives project completion and collaborates with other teams
• In-depth knowledge of leading cloud providers and security services they provide
• Leverage agile and DevOps development techniques