Padmi

Risk Consulting Digital Risk Manager Cloud

IndiaPosted 1 month ago
CybersecuritySeniorFull Time; Regular
Apply at EY

Opens the source posting on shine.com

Source description

About the role

View original

Manager Cloud (Risk Consulting Digital Risk) Our Risk Consulting services provide clients with a candid and reliable overview of their risk landscape. Our solutions enable clients to build confidence and trust with customers, regulators, and the broader market. The opportunity Within Cloud Risk and Security, this role focuses on leading engagements that assess, test, and validate cloud security and risk controls across AWS, Azure, and Google Cloud Platform environments. The role involves working closely with IT, cloud engineering, security teams, and business stakeholders to ensure that cloud environments are secure, resilient, and aligned with business objectives and regulatory requirements. Your Key Responsibilities Operate as a fieldwork leader, assisting clients in identifying, assessing, and monitoring cloud-related security and technology risks. Lead and execute cloud security and risk assessments, including control design and operating effectiveness testing across AWS, Azure, and GCP. Collaborate with engagement teams to plan engagements, develop work programs, timelines, risk assessments, and testing procedures. Serve as a fieldwork leader by directing daily testing activities, tracking engagement progress, and managing staff performance. Perform cloud architecture and configuration reviews covering landing zones, identity models, network segmentation, encryption and key management, logging and monitoring, and backup and disaster recovery. Assess cloud governance and security controls aligned to shared responsibility models and industry frameworks. Prepare high-quality deliverables, reports, and recommendations aligned with US work product quality standards. Skills And Attributes For Success Strong fundamentals across cloud risk and cloud security, with handson experience across AWS, Azure, and Google Cloud Platform. Strong audit mindset with the ability to design, execute, and evidence control testing across cloud environments. Proven experience leading cloud security audits, risk assessments, architecture reviews, and maturity assessments. Practical experience assessing controls related to identity and access management, network security, encryption and KMS, logging and monitoring/SIEM, backup and disaster recovery, and data protection. Experience with containerized and cloudnative environments, including Kubernetes, serverless, and workload security. Proven ability to lead multilocation teams, manage delivery risks, and deliver highquality outcomes within agreed timelines and budgets. Strong written and verbal communication skills in English (nonnegotiable). Ability to manage time effectively and work in US time zones, as per project needs. Exposure to cyberrelated risk or security activities is an added advantage. Behavioral Skills Demonstrates adaptability and agility, with a strong commitment to continuous learning across cloud platforms and emerging technologies. Exhibits endtoend engagement leadership, delivering cloud security audits and risk assessments across complex environments. Brings an innovationoriented mindset, leveraging automation and analytics to enhance control testing efficiency and continuous monitoring. Actively contributes to practicebuilding initiatives, including development of accelerators, tools, and reusable assets. Proven ability to lead, mentor, and guide teams to deliver highquality outcomes. Communicates effectively and manages stakeholder expectations across technical and business audiences. To qualify for the role, you must have. Bachelors or Masters degree with 712 years of total experience, including 35 years in cloud security or cloud risk roles. Cloud security certifications such as CCSP or CCSK, AWS Security Specialty, Azure Security Engineer, or equivalent. Ideally, youll also have Exposure to container security, Kubernetes, Zero Trust concepts, SASE/SSE, CASB, or cloudnative security tooling is preferred. Experience supporting regulated industries or largescale cloud transformations or migrations is an added advantage. .

One address, no account. We’ll tell you when matching roles go live.

More at EY

Related open roles

View all roles