Mobile and Cloud Security Specialist - Remote - Contractor
Role Description
Focused on protecting enterprise infrastructure, reducing risk, and strengthening overall security posture. The role will focus on developing detailed procedures across Cloud and Mobile domains as part of the enhancement of Infrastructure Security Org.
· Develop detailed procedure documents aligned to organizational standards, cyber security frameworks, and engineering documentation
· work with stockholders to walk though the document and gather and implement feedback
.Key Skills
· Strong understanding of Mobile Security and Cloud Security concepts, risks, controls, and industry best practices.
· Experience developing, reviewing, and maintaining cybersecurity policies, standards, procedures, and operational guidelines.
· Ability to translate high-level security policies and control requirements into detailed, actionable, and auditable procedures.
· Knowledge of cybersecurity frameworks, including NIST CSF, NIST SP 800-53, ISO 27001/27002, and CIS Controls.
· Strong technical writing, stakeholder management, and cross-functional collaboration skills.
Technical Skills & Certifications (Good to Have)
· Mobile Security: Understanding of Mobile Device Management (MDM), Enterprise Mobility Management (EMM), Mobile Application Management (MAM), BYOD, device hardening, mobile application security, and mobile threat defense.
· Cloud Security: Familiarity with AWS, Microsoft Azure, and/or Google Cloud security controls, including IAM, encryption, logging and monitoring, network security, configuration management, and cloud security posture management (CSPM).
· Knowledge of cloud security frameworks and guidance such as CSA Cloud Controls Matrix (CCM), NIST SP 800-53, and CIS Benchmarks.
· Understanding of mobile security guidance such as NIST SP 800-124, OWASP MASVS, and applicable mobile device security baselines.
Functional Skills (GRC & Procedure Development)
· Procedure Development: Develop end-to-end cybersecurity procedures covering mobile device security, cloud security .
· GRC & Control Alignment: Map procedures to enterprise security standards, regulatory requirements, risk management frameworks, and applicable cybersecurity frameworks (such as NIST).
· Stakeholder Engagement: Collaborate with Cloud Security, Mobile Security, IT Operations, Risk, Compliance, and Internal Audit teams to validate procedure accuracy, ownership, and operational feasibility.
· Governance & Lifecycle Management: Establish procedure review cycles, version control, approval workflows, and ongoing maintenance processes.
