GRC Engineer - Cloud Security

Job Summary

A company is looking for a GRC Engineer - Cloud & Application Security.

Key Responsibilities:

• Proactively evaluate the security configurations of applications and AWS services
• Determine detailed remediation plans for security gaps and work with stakeholders to resolve them
• Perform security assessments of third-party hosted applications and systems

Required Qualifications:

• 5+ years of experience in security governance, cloud and application security assessments, risk management, or third-party risk
• Strong knowledge of industry standard frameworks such as NIST, FFIEC, SOC 2, PCI DSS, HiTrust, etc
• Thorough knowledge of enterprise-scale security architecture, cloud security, and application security best practices
• Familiarity with containerization technologies and CI/CD pipelines
• Relevant certifications such as AWS Certified Security Specialty, CISSP, or CCSP are a plus