Job Duties:

Our professionals understand the dynamics of serving complex, global clients across multiple industries, and the importance of increasing transparency around business performance. We provide specialized cloud and internal control services for internal and external audit clients along with other services related to financial reporting. To further exploit opportunities and mitigate the risks presented by different markets, we also work with clients to navigate complexities, risks and opportunities presented by third-party relationships.

Application modernization and migration risk assessments

Cloud native applications and services risk and control assessments

Cloud services orchestration and automation

Cloud managed services

Risk and control assessments

Control design, implementation, operation, and evaluation

Cloud secure reference architectures design evaluation

Risk and control analysis of automated DevSecOps pipelines

Cloud security posture management assessments

Ideating and developing cloud risk and controls solutions to meet client needs

Regardless of project type, your work will require:

Proficiency in verbal and written communication skills essential to interacting with clients and teams

Ability to work independently and manage multiple projects/assignments/responsibilities in a fast-paced environment with minimal oversight

Strong problem solving and critical thinking skills

Ability to quickly research and collect data from unique places

Ability to synthesize data and convey information in a concise yet meaningful way

Strong understanding of Cloud and IaaS, PaaS, and SaaS services

Qualifications:

Required:

BA/BS in Computer Science, Information Systems Administration or a related field

4+ years of related professional experience

2+ years’ experience in auditing Cloud (e.g.; AWS, Azure or GCP) from a technical risk and controls perspective

Associate or professional level certifications in any one of the following cloud service providers: AWS, Azure, or GCP

Any experience or curiosity in the following:

• Infrastructure as a code to drive compliance
• Experience in leverage native cloud service provider (AWS, Azure or GCP) API commands to extract data
• CI/CD pipeline architecture
• Tools supporting CI/CD pipelines such as GitHub, CircleCI, Jenkins, Ansible, Cloud Formation, Terraform, AzureDevOps, etc.