Cloud Security & GRC Analyst / Engineer

Call on 7738402343 A Cloud Security with GRC (Governance, Risk, and Compliance) professional is responsible for securing cloud environments while ensuring that systems comply with regulatory requirements, organizational policies, and industry standards. Cloud Security with GRC Job Description Job Title: Cloud Security & GRC Analyst Engineer Job Summary: The Cloud Security & GRC professional is responsible for implementing cloud security controls, managing governance and compliance initiatives, conducting risk assessments, and ensuring adherence to security frameworks and regulatory standards. The role involves collaborating with security, IT, and business teams to protect cloud infrastructure and maintain compliance. Key Responsibilities Design, implement, and monitor cloud security controls across platforms such as AWS, Azure, and Google Cloud. Perform cloud security risk assessments and recommend mitigation strategies. Ensure compliance with standards such as: ISO 27001 SOC 2 PCI DSS GDPR HIPAA (where applicable) NIST Cybersecurity Framework Develop and maintain security policies, standards, and procedures. Conduct internal audits and support external compliance audits. Monitor cloud environments for security risks and compliance violations. Manage Identity and Access Management (IAM) policies and least-privilege access. Work with DevOps and engineering teams to implement security best practices. Perform vendor and third-party risk assessments. Track remediation of security findings and compliance gaps. Prepare security and compliance reports for management and stakeholders. Support incident response and forensic investigations when needed. Required Skills Cloud Security AWS Security Microsoft Azure Security Google Cloud Platform (GCP) Security Cloud IAM Network Security Cloud Firewalls Encryption and Key Management Cloud Security Posture Management (CSPM) GRC Risk Management Governance Frameworks Compliance Management Security Auditing Policy Development Control Testing Third-Party Risk Management Business Continuity and Disaster Recovery Security Tools Microsoft Defender for Cloud AWS Security Hub Microsoft Sentinel Splunk Qualys Tenable Prisma Cloud Wiz CrowdStrike ServiceNow GRC