Employer description & source details
Cloud or security certification such as CCSP, CISSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Professional Cloud Security Engineer. • Experience in standards and lifecycle governance, security policy, control engineering, cloud governance, or technical control testing. • Experience with infrastructure as code or policy as code using Terraform, CloudFormation, Bicep, ARM templates, or equivalent technologies. • Experience with regulated financial services or another highly regulated industry. • Experience supporting audit or regulatory examinations and producing audit-defensible evidence packages. • Familiarity with Jira, Confluence, SharePoint, or comparable tools used to manage requirements, evidence, reviews, approvals, and delivery status. New or revised cloud STIGs and supporting control documentation that meet SLG quality and governance requirements. • Documented cleanup recommendations and completed remediation of assigned STIG content. • Accurate control mappings, assessment procedures, implementation guidance, and evidence requirements. • Complete evidence packages and validation summaries for controls without automated CaC coverage. • Documented review comments, issue dispositions, stakeholder decisions, approvals, exceptions, and open dependencies. • Regular delivery-status reporting, including completed work, work in progress, blockers, and risks requiring escalation. Assigned STIG deliverables are technically accurate, internally consistent, testable, traceable, and completed in accordance with agreed priorities and review cycles. • Evidence packages clearly demonstrate whether the applicable requirement has been implemented and contain sufficient documentation to support review and audit activitie
Extracted skills: aws, azure, gcp, terraform, security