Skip to Content
On-site

GRC Cloud Security Analyst

Job Overview

The GRC Cloud Security Analyst (official title: Staff GRC Assurance Analyst I), a thought leader residing within our security organization, is responsible for leading cloud security compliance audits, control evaluations, and risk assessments across our…

Key points

  1. Plan and conduct risk-based security audits across AWS and Azure environments to evaluate the design and operating effectiveness of preventive, detective…

  2. Assess compliance with company policies and control requirements aligned with security industry control frameworks and standards.

  3. Review cloud security evidence, including architecture diagrams, configurations, logs, access records, tickets, approvals, monitoring outputs, source documentation, and system generated reports.

  4. Assess the completeness, accuracy, reliability, and auditability of data produced by internal systems.

  5. Assurance, or a related discipline, with meaningful experience assessing cloud.

  6. Demonstrated ability to plan and execute audits or control assessments.

  7. Scoping, walkthroughs, evidence review, testing, issue documentation, and remediation.

  8. Practical knowledge of AWS and Azure security concepts.

Skills

AWSAzureRisk ManagementExpress.jsTicketing ToolsStakeholder ManagementNetwork SecurityCommunication

Experience: Mid-level · 5+ years