Cloud Security and Compliance Professional

About the Role:

We are seeking a highly skilled Cloud Security and Compliance Specialist to join our team. This role will be responsible for owning and executing end-to-end security audits and compliance initiatives across applications, infrastructure, and organizational processes.

Responsibilities:

• Conduct technical assessments required by new BFSI clients, ensuring that their systems and applications meet the necessary security and compliance standards.
• Analyse and complete detailed cloud infrastructure security and compliance questionnaires, providing thorough and accurate responses to clients and stakeholders.
• Assist in mapping customer security and regulatory requirements to internal controls, ensuring seamless alignment and compliance.
• Maintain documentation and templates for commonly requested BFSI assessment artifacts, streamlining the process for future assessments.
• Manage and complete security questionnaires from clients, vendors, and partners, ensuring timely delivery and accuracy of results.
• Evaluate vendor security and compliance by reviewing their responses and supporting documentation, identifying potential risks and areas for improvement.
• Identify security risks within the company's IT infrastructure, applications, and services, developing and implementing effective mitigation strategies.
• Ensure compliance with security standards such as ISO 27001, GDPR, SOC 2, or any other relevant frameworks, maintaining up-to-date knowledge of industry regulations.
• Work with internal teams to maintain compliance with legal and regulatory requirements, fostering collaboration and open communication.
• Collaborate with the IT security, legal, and procurement teams to address concerns identified in the security assessments, ensuring prompt resolution and risk reduction.
• Develop and maintain internal security policies and procedures related to vendor assessments and third-party risk management, ensuring consistent application and enforcement.
• Prepare detailed reports summarizing findings from security assessments and risk analysis, presenting complex information in a clear and concise manner.
• Provide recommendations to improve security measures and compliance, driving continuous improvement and growth.
• Educate internal staff and external partners about security best practices and compliance requirements, promoting a culture of security awareness and responsibility.
• Support pre-sales and onboarding teams with timely delivery of assessment documentation, facilitating smooth client onboarding and reducing friction.
• Stay updated with AWS best practices, shared responsibility model, and emerging cloud security trends, applying this knowledge to drive innovation and improvement in security and compliance initiatives.

Requirements:

• Bachelor's degree in computer science, Information Security, Data Science, or a related field, demonstrating a strong foundation in technical principles and concepts.
• 5+ years of experience working with Audit/compliance, application security assessments, AWS cloud security preferably BFSI domain, showcasing a deep understanding of cloud security and compliance challenges.
• 2+ yrs. of experience on AWS cloud security and risk assessments, highlighting expertise in cloud security technologies and methodologies.
• Strong exposure to AWS cloud infrastructure (Guard Duty, security hub, inspector, Firewall, IAM, EC2, VPC, S3, Security Groups, etc.), demonstrating hands-on experience with AWS cloud services.
• Familiarity with secure coding practices, vulnerability management, and threat modelling, applying a holistic approach to security and compliance.
• Experience with VRA templates, cloud security checklists, and assessment responses for enterprise or regulated clients, showcasing ability to tailor solutions to diverse client needs.
• Familiarity with information security standards such as ISO 27001, SOC 2, RBI cybersecurity framework, staying current with evolving industry regulations and standards.
• Strong understanding of data protection, encryptions methodologies, applying robust encryption techniques to safeguard sensitive data.
• Ability to interpret and explain security configurations and policies in layman's terms, communicating complex information effectively to both technical and non-technical stakeholders.
• Experience with security controls, vulnerability scanning tools (e.g., Nessus, wire shark), or SIEM, leveraging various tools and technologies to drive security and compliance initiatives.
• Exposure with security tools such as network firewall, IPS/IDS is plus, expanding skill set and expertise in security technologies.

What We Offer:

• A dynamic and collaborative work environment, fostering growth and professional development.
• Opportunities for ongoing education and training, staying up-to-date with the latest cloud security and compliance trends.
• A competitive compensation package, recognizing individual contributions and achievements.
• A comprehensive benefits program, providing essential support and well-being resources.