This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Analyst will assist in audit preparation, compliance monitoring, and governance activities, helping to maintain a standardized, risk-based compliance model for cloud security.
Job Responsibility:
Support the implementation of processes and methods for auditing and addressing non compliance to information security standards and methodologies
Assist in tracking and reporting remediation efforts to migrate non-compliant environments to compliant states
Prepare materials (reports, presentations, dashboards, spreadsheets, etc.) to support informed decision-making
Validate data for completeness, accuracy, and relevance for compliance and risk reporting
Maintain internal documentation to ensure processes and operational requirements are up to date
Provide analytical support for issue management, project assessments, and compliance reporting
Collaborate with cross-functional teams to track and support remediation efforts
Assist in evaluating and documenting controls, standards, processes, and procedures
Support communications related to cloud security initiatives and compliance updates
Participate in operational risk activities such as risk assessments, process mapping, identification of risks, and documentation/testing of controls
Support coordination of audit-related activities, including evidence collection and response preparation
Monitor regulatory updates and assist in identifying potential impacts to cloud security controls
Requirements:
2+ years of experience in Information Security, Technology Risk, IT Controls, or related roles
Familiarity with Cloud Control Matrix (CCM) and CIS benchmarks for basic gap assessments
Foundational understanding of Information Security disciplines including Governance, Identity & Access Management, Infrastructure Security, Vulnerability Management, Data Protection, Application Security, and Incident Response
Exposure to audit or regulatory processes preferred
Understanding of Cloud fundamentals including containers, software-defined networks, high availability design, multi-cloud, and serverless compute concepts