Description
This role will support the delivery of cloud control testing in the areas of information & cyber security, technology and cloud infrastructure, conducting design adequacy and operating effectiveness testing of cloud controls for SOC2. The role holder will have proven extensive knowledge and experience in the design and testing of GITCs including expertise in Cloud based control and able to make appropriate recommendations on improvement of Cloud controls and processes.
The incumbent will work closely with Business, IT and Internal stakeholders to support the delivery of control resiliency testing of cloud controls. Most importantly, they must be an effective communicator (both verbally and in writing) and a supportive team player, taking a consultative rather than confrontational approach whilst maintaining the integrity and independence and ensuring effective management of security risk.
Principal duties
- Perform assessment of Cloud controls (focussing on Azure) including;
- Control design adequacy
- Control operating effectiveness
- Cloud control testing (including guard rails resource log analysis etc)
- Developing operating processes and procedures for cloud control testing
- Delivery of structured test papers for all controls tested
- Reporting and tracking of cloud control gap remediations as well as ineffective or inadequate controls
- Identify opportunities and recommendations to improve the design and implementation of cloud controls
- Support the control owners in the design and maintenance and documentation of cloud controls
- Undertaking other tasks and responsibilities as assigned and required
Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.
Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation
We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website