Cloud Security GRC

We have openings for Cloud Security GRC.

• Location: Bengaluru
• Experience: 4 - 8 years
• Salary: 10 -21l

Mandatory Skills : Cloud Security, Cloud Architecture, Risk Assessment, IT Audit, Cloud Audit,ITGC, NIST, Control, Framework, DevSecOps , Kubernetes, Terraform, Python, GRC

Job Summary: The Cloud Security DevOps Engineer will be responsible for ensuring the security and compliance aspects of cloud-based infrastructure for KPMG India. The incumbent should be knowledgeable in DevOps, Cloud, Kubernetes, Terraform, Python, and have a deep understanding of the ISO framework. The successful candidate will work closely with the technology team to deliver secure and reliable cloud based solutions for KPMG India clients.

Duties and Responsibilities:

1. Work closely with the technology team to build and maintain secure, scalable, and highly available cloud-based infrastructure.

2.Experience with information security; cloud security; risk assessment and GRC is must to have

3. Develop and maintain cloud-based security policies, procedures, and guidelines.

4. Conduct ongoing security assessments and audits to identify vulnerabilities and ensure compliance with ISO standards.

5. Develop and maintain scripts and tools for automated security testing, monitoring, and incident response.

6. Support the technology team in designing, implementing, and testing secure and reliable cloud based solutions.

7. Provide training and education to team members on cloud-based security best practices and standards.

8. Collaborate with other teams (e.g. cyber security, IT operations) to ensure the security and compliance of the entire infrastructure.

9. Stay up to date on emerging cloud security trends and technologies.

10. Should be capable of understanding the Security Control Framework and suggesting the required evidence to ensure compliance with the controls.

Required Skills & Qualifications:

1. Bachelor's degree in Computer Science, Information Technology, or related field.
2. Implements security controls, risk assessment framework, and program that align to regulatory requirements on Cloud.
3. Experience in evaluating Information security policies, procedures and standards.
4. Evaluates risks and develops security standards, procedures, and controls to manage risks.
5. Implements processes, such as GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks, testing. Develops reporting metrics, dashboards, and evidence artifacts.
6. Experience in any cloud (AWS/Azure/GCP) would work
7. Defines and documents business process responsibilities and ownership of the controls. Schedules regular assessments and testing of effectiveness and efficiency of controls.
8. Updates security controls and provides support to all stakeholders on security controls covering internal assessments, regulations, protecting Personally Identifying Information (PII) data, and Payment Card Industry Data Security Standards (PCI DSS).
9. Experience in internal and external information security risk and exceptions assessments, including incidents, vulnerability management, scans, patching status, secure baselines and penetration test results.
10. Document and report control failures and gaps to stakeholders. Provides remediation guidance and prepares management reports to track remediation activities.
11. Should be capable of understanding the Security Control Framework and suggesting the required evidence to ensure compliance with the controls.
12. Strong understanding of ISO 27001, 27002, NIST and CSA-CCM.
13. Certifications in cloud security (e.g. CCSK, CCSP) and CISSP/CISM

Questionnaire

Question2:Open to relocate to Bengaluru

Question3:Current Location

Question4:Experience in Cloud ISO Audits

Question5:Experience in risk assessment and GRC for Cloud Security

Question6:Experience in DevOps, Cloud, Kubernetes, Terraform, Python (in years)

Question7:Experience in Cloud Security (Please specify cloud name (AWS/Azure/ GCP) (in years)

To proceed further, kindly share you updated resume on [Confidential Information] or can whatsapp on 7719594751, Thanks