Senior Cloud & Cyber Security – Info Sec Specialist
Core
Develop, maintain, and assess security standards (STIGs, CIS Benchmarks) and control documentation for cloud environments to support audit and regulatory compliance for financial services clients.
Role type
Senior IC security specialist (cloud security & standards)
Builds
Cloud security standards, control documentation, evidence packages, and remediation guidance
Domain
Financial services, cloud security, compliance
Required skills
Cloud security architecture, STIG/CIS benchmark development, GCP/AWS/Azure expertise, Identity and access management, Vulnerability management, Technical writing, Risk-based control design, Agile delivery
Preferred skills
CCSP/CISSP certification, Infrastructure as code (Terraform/CloudFormation), Regulated industry experience, Audit support, Jira/Confluence
Technologies
GCP, AWS, Azure, STIGs, CIS Benchmarks, Wiz, Azure Policy, AWS Service Control Policies, Terraform, CloudFormation, Jira, Confluence
Responsibilities
Develop and revise cloud STIGs and control documentation, Perform manual control validation and evidence collection, Map controls and create assessment procedures, Support audit examinations and produce evidence packages, Track remediation and manage exceptions, Report delivery status and risks
Seniority
Senior, hands-on IC
