RSM USI

Position Summary:

We are seeking a highly skilled and experienced Cloud Security Audit Associate to lead and execute comprehensive cloud security and resilience assessments across enterprise environments. This role requires a strong blend of audit methodology, cloud engineering expertise, and risk advisory capabilities to evaluate cloud service provider (CSP) risks, enterprise control effectiveness, and application-level Responsibilities:

- Lead cloud security and resilience audits across AWS, Azure, and GCP platforms.

- Evaluate CSP risk indicators, SLAs, compliance attestations, and shared responsibility matrices.

- Assess enterprise control sets for traceability, automation, and alignment with compliance frameworks (e.g., SOC, PCI, HITRUST, CIS, NIST).

- Review SDLC, production readiness, and application onboarding processes for control validation.

- Conduct sample assessments of critical and non-critical cloud applications to validate control implementation and resilience planning.

- Deliver detailed audit reports, executive summaries, and strategic recommendations.

- Collaborate with cross-functional teams including Cloud Engineering, DevOps, Risk, and Internal Audit.

- Support clients in aligning cloud programs with regulatory requirements and industry best Qualifications:

- Bachelors and/or masters degree in information systems, Cybersecurity, or related field.

- 5+ years of experience in IT audit, cloud security, or risk consulting.

- Excellent communication skills, with fluency in Englishboth written and verbalto effectively engage with global clients, present findings, and lead stakeholder discussions.

- Professional certifications such as CISA, CISSP, CCSP, CTPRA, or cloud-specific credentials (AWS, Azure, GCP).

- Strong understanding of cloud infrastructure components (VMs, containers, serverless, networking).

- Familiarity with compliance frameworks and benchmarks (SOC, PCI, HITRUST, CIS, CSA CCM,

NIST 800-53).

- Flexibility to work in U.S. time zones and support cross-border Skills:

- Experience working in global/multinational teams.

- Hands-on experience with Infrastructure as Code (IaC), Policy as Code (PaC), DevSecOps, and cloud automation.

- Ability to assess cloud application architecture for security and resilience risks.

- Strong analytical, documentation, and stakeholder engagement skills.

Note : For your candidature to be considered on this job, you need to apply necessarily on the company's redirected page of this job. Please make sure you apply on the redirected page as well.