Job description
By joining our rapidly growing Risk Advisory practice you will serve as a trusted partner to our clients. You’ll bring your first-hand experience, unique perspectives, and functional knowledge to deliver tailored integrated solutions that solve today’s challenges and set the foundation for future success. With support from experienced leaders and a dedicated coach, you will join a collaborative community that invites you to contribute beyond the scope of client delivery.
What You’ll Do:
- Develop logical and technical cloud security architectures, API designs, and functional requirements for secure cloud environments
- Build roadmaps, design, and implement secure cloud-based technologies such as containers, infrastructure-as-code, and serverless
- Conduct solution-based gap analysis and define, identify, and engineer suitable solutions for asset testing, code scanning, and application and infrastructure monitoring
- Inventory security tools, identifying opportunities to consolidate and leverage unknown, unused, or new features
- Review technical processes, with a specific focus on cybersecurity and data (vulnerability management, disaster recovery, data protection, software development), updating them to be effective in a cloud environment
- Benchmark and model cloud security capability maturity against industry, regulatory standards, and frameworks (NIST CSF, NIST 800-53, Cloud Security Alliance, ISO 27000)
- Conduct cybersecurity program and control-level assessments, identify gaps, and produce strategies and roadmaps for security program and control uplift
- Lead workstreams across various cybersecurity topics, including governance, risk, and compliance; incident response; and security architecture and engineering
- Conduct research and analysis, leveraging data to derive valuable insights and actionable recommendations for clients
- Develop deliverables that showcase a strong business rationale, presenting impactful findings and recommendations
- Stay current with the latest developments and trends in cyber and privacy issues, actively sharing knowledge with the team and the firm
- Lead project administration tasks such as project setup, planning, budgeting, account management, billing, and preparing client proposals
What You’ll Bring:
- 5+ years of experience in Cloud & Cybersecurity
- Experience building and implementing solutions on industry cloud platforms (e.g. AWS, Azure, GCP)
- Experience in implementing, building and operating security capabilities in cloud environments and working with cloud/DevOps technologies including containers, infrastructure-as-code, and serverless
- Working knowledge of cloud and cybersecurity standards and frameworks
- Exceptional verbal and written communication, analytical thinking, and problem-solving skills
Qualifications:
- Bachelor’s degree from an accredited university
- Professional certification (CISA, CISM, CISSP, CIPT, CIPP, CIPM).
- Willingness to travel domestically up to 20%-30% (varies by client)
- Availability to work on client site or in office 3 days a week, with 2 days remote (hybrid environment)
#LI-Hybrid #LI-BW1
