Cloud Security Analyst

Responsibilities

Kforce has a client that is seeking a Cloud Security Analyst in Hopkins, MN. Summary: We are seeking a highly motivated Information Technology (IT) Controls Tester to join our control testing program. This role is critical to helping the company identify and address compliance, financial, operational, strategic and technology risks in technology processes. The work requires proficiency in the areas of internal ITGC control testing/IT auditing. The role will focus on robust planning and execution of technology control testing. Responsibilities will include:

• Independently validate the design and operational effectiveness of IT General Controls and Cloud controls
• Perform control procedure and documentation reviews including conducting interviews to clarify processes, data flows and architectures
• Prepare test scripts
• Perform root cause and impact analysis and provide management with recommendations to resolve issued findings
• Advise business partners on IT findings, risks and control weaknesses
• Validate findings post remediation
• Use knowledge of the current IT environment and industry IT trends to help identify and anticipate potential issues that may impact the Company's risk landscape
• Design and assist in building continuous monitoring/reporting to improve efficiency an awareness of control testing activities
• Provide technical assistance on audit techniques
• Maintain an understanding of the cybersecurity footprint, platform architecture, cloud infrastructure, data governance and privacy compliance, general computing control structure of the Company (systems and architecture) and be able to apply that knowledge to how it supports the processes and procedures being reviewed
• Develop and maintain strong and effective working relationships with key business partners
• Proactively engage and follow up to ensure deliverables are met, and identified gaps have been communicated
  
  

Requirements

• Experience executing technology audit and ITGC Testing
• Experience in auditing IT cloud operations, network, infrastructure, and security related to Amazon Web Services and Azure
• Experience in IT security and IT governance risk and compliance
• Excellent listening and communication skills in both written and verbal forms; Previous experience in writing internal audit reports preferred
• Must be proficient using Microsoft Office software
• Must possess an understanding of Information Security policies and standards, and have a working knowledge of Business Continuity Programs, electronic banking software and applications, Cloud computing, Cybersecurity Regulatory Framework, and Vendor Management practices
• Strong analytical, interpersonal and communication skills
• Strong understanding of cybersecurity processes and concepts (e.g. vulnerability management, security governance, software development, incident response, physical security, auditing and logging, micro segmentation, secure access service edges, zero trust architecture, PKI, penetration testing) as well as application controls
• Working knowledge and experience in python, JSON and SQL
• Working knowledge and experience with professional standards including CCM, NIST CSF, COSO and COBIT
• Ability to operate independently and perform quality work within the scheduled timeframe
  
  

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.