Cloud Security Engineer (CISP or CISM)

Role:            Security – Analyst

Location:     (Remote)

Duration:     3+ months (with extension possible)

Minimum Requirements:

·       Bachelor''''s degree in Computer Science, Information Technology, or a related field (Master''''s degree preferred).

·       Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification is a plus.

·       Proven experience in designing and implementing automated processes for evidence collection in SOC2 compliance projects.

·       Experience in collecting evidence for SOC2 compliance within a cloud security environment.

·       Strong understanding of SOC2 framework, controls, and compliance requirements.

·       Proven experience in cloud security and operations within the Google Cloud Platform (Google Cloud Platform) environment.

·       Strong understanding of Google Cloud Platform security best practices, controls, and compliance standards.

·       Engineering or development experience, with proficiency in scripting and automation tools (e.g., Python, Go).

·       Familiarity with cloud security Secure Workload is a plus.

Additional role, initiative and group information:

·       You will be responsible for meticulously collecting, organizing, and managing all evidence required for SOC2 compliance within Secure Workload.

·       Your role is vital in ensuring that the organization meets SOC2 standards and maintains a strong security posture.

·       You will take a lead role in designing, developing, and implementing automated processes for evidence collection and compliance reporting.

·       This position is vital in streamlining SOC2 compliance efforts and ensuring the security and auditability of Secure Workload.

Key Responsibilities:

·       Evidence Retention: Establish and manage evidence retention policies and procedures, ensuring compliance with SOC2 requirements.

·       Automated Evidence Collection: Design, develop, and maintain automated processes and tools for collecting evidence required for SOC2 compliance, ensuring efficiency and accuracy.

·       Data Integration: Collaborate with cross-functional teams to integrate evidence collection tools and processes into the product''''s existing systems and workflows.

·       Continuous Improvement: Continuously improve and optimize automated evidence collection processes to enhance efficiency, reliability, and scalability.

·       Documentation and Reporting: Maintain clear and comprehensive documentation of automated processes and produce detailed reports for compliance purposes.

·       Documentation Management: Maintain a structured and organized repository of evidence, ensuring all documents are complete, accurate, and readily accessible for audit purposes.

·       Evidence Collection: Develop and execute a comprehensive plan for collecting evidence related to SOC2 controls, policies, and procedures within Secure Workload.

·       Evidence Validation: Work closely with internal teams to validate the accuracy and completeness of evidence and resolve any discrepancies or gaps.

·       Security Awareness: Collaborate with cross-functional teams to raise awareness of SOC2 evidence collection requirements and best practices.

·       Continuous Improvement: Identify opportunities to enhance evidence collection processes and tools, streamlining efficiency and accuracy.

·       Compliance Audits: Assist in coordinating SOC2 audits and assessments, providing the necessary evidence and documentation for successful audit