AWS Cloud Security and Compliance Professional

We are seeking a skilled security professional to own and execute end-to-end security audits and compliance initiatives across applications, infrastructure, and organizational processes.

• Conduct thorough technical assessments required by new clients, ensuring the highest level of security and compliance.
• Analyse and complete detailed cloud infrastructure security and compliance questionnaires, providing accurate and timely results.
• Assist in mapping customer security and regulatory requirements to internal controls, ensuring seamless alignment.
• Maintain documentation and templates for commonly requested assessment artifacts, streamlining the process for all stakeholders.
• Manage and complete security questionnaires from clients, vendors, and partners, fostering strong relationships and trust.
• Evaluate vendor security and compliance by reviewing their responses and supporting documentation, making informed decisions.
• Identify security risks within the company's IT infrastructure, applications, and services, prioritizing mitigation strategies.
• Ensure compliance with security standards such as ISO 27001, GDPR, SOC 2, or any other relevant frameworks, upholding industry best practices.
• Work closely with internal teams to maintain compliance with legal and regulatory requirements, ensuring a cohesive approach.
• Collaborate with security, legal, and procurement teams to address concerns identified in the security assessments, driving continuous improvement.
• Develop and maintain internal security policies and procedures related to vendor assessments and third-party risk management, promoting a culture of security.
• Prepare detailed reports summarizing findings from security assessments and risk analysis, providing actionable insights.
• Provide recommendations to improve security measures and compliance, empowering stakeholders to make informed decisions.
• Educate internal staff and external partners about security best practices and compliance requirements, enhancing knowledge and awareness.
• Support pre-sales and onboarding teams with timely delivery of assessment documentation, ensuring seamless integration.
• Stay updated with AWS best practices, shared responsibility model, and emerging cloud security trends, applying expertise to drive success.

• Bachelor's degree in computer science, information security, data science, or a related field, demonstrating a solid foundation in security principles.
• 5+ years of experience working with audit/compliance, application security assessments, AWS cloud security preferably BFSI domain, showcasing expertise and depth of knowledge.
• 2+ yrs. of experience on AWS cloud security and risk assessments, highlighting ability to apply theoretical knowledge in practical scenarios.
• Strong exposure to AWS cloud infrastructure, including architecture, deployment, and management.
• Familiarity with secure coding practices, vulnerability management, and threat modelling, enabling effective identification and mitigation of security risks.
• Experience with VRA templates, cloud security checklists, and assessment responses for enterprise or regulated clients, streamlining the assessment process.
• Familiarity with information security standards such as ISO 27001, SOC 2, RBI cybersecurity framework, upholding industry best practices.
• Strong understanding of data protection, encryption methodologies, and confidentiality requirements, ensuring sensitive information is handled securely.
• Ability to interpret and explain security configurations and policies in layman's terms, facilitating clear communication among stakeholders.
• Experience with security controls, vulnerability scanning tools, or SIEM, enabling proactive identification and remediation of security issues.
• Exposure with security tools such as network firewall, IPS/IDS, further enhancing expertise and adaptability.