We are seeking a Sr. Cloud Compliance Analyst who would be responsible for ensuring the secure, compliant, and efficient utilization of cloud services within the organization. This role involves designing and implementing cloud governance guidelines, safeguarding sensitive data, and ensuring adherence to industry standards and regulatory requirements. This position reports to the Senior ITS Compliance Manager.

Required Experience (5 years):

• Experience in Cloud Security or Cloud Security Compliance.
• Experience with cloud service providers - AWS, Azure, Google Cloud.
• Experience and knowledge of compliance frameworks and standards - ISO 27001, NIST, GDPR.
• Experience and proficiency in cloud computing concepts - IaaS, PaaS, SaaS.
• Experience and in-depth understanding of cloud security principles and best practices.
• Experience applying a detail-oriented approach, especially in compliance and auditing tasks.
• Experience demonstrating proficiency in risk management and mitigation strategies.
• Experience applying technical skills in implementing security solutions in cloud environments.
• Experience demonstrating adaptability to new technologies and changing security landscapes.
• Experience demonstrating commitment to continuous learning in cloud security and compliance.
• Experience demonstrating excellent communication skills, with proficiency in collaborating with cross-functional teams, technical and non-technical audiences.
• Experience demonstrating strong analytical and problem-solving abilities.

Preferred Experience:

• Experience with advanced security technologies and tools, such as SIEM, IDS/IPS, and advanced threat protection.
• Familiarity with programming or scripting languages relevant to cloud security automation and orchestration.
• Experience leading a team or managing complex security projects.
• 10 years of experience in cloud security or cloud security compliance.
• Experience in highly regulated industries like finance, healthcare, or government.

Preferred Certifications:

• CISSP-ISSMP, Certified Cloud Security Professional (CCSP), CISA, or cloud-specific certifications (AWS Certified Solutions Architect, Microsoft Certified Azure Solutions Architect Expert).

Education:

• Master's degree in Cybersecurity, Information Technology Compliance, or a related field preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
  • Degree may be replaced with number of years' experience.

Responsibilities:

• Ensure the secure, compliant, and efficient use of cloud services.
• Design, implement, and enforce cloud governance guidelines, standards, procedures, and best practices.
• Collaborate closely with the cybersecurity team to address compliance-related issues and mitigate findings.
• Safeguard sensitive data and ensure adherence to industry standards and regulatory requirements.
• Establish and implement guidelines for access controls, data protection, and identity and access management.
• Collaborate with cross-functional teams to develop cloud governance guidelines and standards aligned with the organization's policies, security, and compliance objectives.
• Monitor and drive remediation activities to ensure compliance with relevant regulatory requirements, industry standards, and best practices related to cloud security and data privacy.
• Conduct risk assessments to identify and address potential security weaknesses.
• Educate employees and stakeholders on cloud security best practices, compliance requirements, and potential risks.
• Maintain comprehensive documentation of cloud security controls, compliance assessments, and incident response procedures.
• Generate regular reports for management, highlighting key performance indicators and compliance metrics.
• Stay current with emerging cloud security trends, compliance requirements, and technologies.