Cloud Security Analyst

Job Title: Cloud Security Analyst

Location: Phoenix, AZ - onsite

Duration: 6 months

Cloud Security Analyst

"SaaS Security analyst

Cloud Control Matrix (CCM)

Information Security certification (e.g., Security+, CCSP Associate, CISA)"

·         2+ years of experience in Information Security, Technology Risk, IT Controls, or related roles

·         Familiarity with Cloud Control Matrix (CCM) and CIS benchmarks for basic gap assessments

·         Foundational understanding of Information Security disciplines including Governance, Identity & Access Management, Infrastructure Security, Vulnerability Management, Data Protection, Application Security, and Incident Response.

·         Exposure to audit or regulatory processes preferred Understanding of Cloud fundamentals including containers, software-defined networks, high availability design, multi-cloud, and serverless compute concepts.

·         The Analyst will assist in audit preparation, compliance monitoring, and governance activities, helping to maintain a standardized, risk-based compliance model for cloud security.

·         Support the implementation of processes and methods for auditing and addressing noncompliance to information security standards and methodologies

·         Assist in tracking and reporting remediation efforts to migrate non-compliant environments to compliant states

·         Prepare materials (reports, presentations, dashboards, spreadsheets, etc.) to support informed decision-making

·         Validate data for completeness, accuracy, and relevance for compliance and risk reporting

·         Maintain internal documentation to ensure processes and operational requirements are up to date

·         Provide analytical support for issue management, project assessments, and compliance reporting

·         Collaborate with cross-functional teams to track and support remediation efforts

·         Assist in evaluating and documenting controls, standards, processes, and procedures

·         Support communications related to cloud security initiatives and compliance updates

·         Participate in operational risk activities such as risk assessments, process mapping, identification of risks, and documentation/testing of controls

·         Support coordination of audit-related activities, including evidence collection and response preparation

·         Monitor regulatory updates and assist in identifying potential impacts to cloud security controls