Job Description

Accountabilities: • Embedded in the cloud delivery team, act as the principal resource for all cloud compliance activities • Interpret generic corporate security directives and controls into a public cloud context • Develop/augment/improve security compliance processes for public cloud environments • Assure successful implementation and functionality of corporate security requirements for public cloud environments • Manage the complete lifecycle of cloud controls • Act as the principal contact within the cloud delivery team for any audit/security review initiatives • Participate with other stakeholders in ongoing reviews of corporate security standards to ensure consideration is given to cloud specific security & compliance requirements • Interface regularly with various enterprise cloud governance functions as required • Be an ambassador for cloud security within the enterprise Required Knowledge/Skills • Hands-on security, compliance and operational experience with one or more public cloud environments (Azure/AWS/GCP) • Ability to obtain artifacts directly from cloud environments to demonstrate compliance • Ability to interpret generic security controls and translate them into actionable cloud security controls • Experience in managing compliance programs for public cloud implementations • Experience managing compliance programs across all traditional information security domains (eg. IAM, PAM, vulnerability/patch/asset management, encryption, network security) • Outstanding communications skills, both written and oral • Ability to operate effectively and obtain desired results in a large, matrixed enterprise Desirable Certifications CISSP, CISA, CRISC, Azure/AWS/GCP specific certifications