Cloud Security Auditor

I’m working on behalf of a leading UK bank to find a Cloud Security Audit AVP to join their internal audit function. The team provides independent cyber security assurance to executive management and the Board, covering governance, risk management and control effectiveness across complex cloud environments.

The role

• Planning and executing end-to-end audits across AWS and Azure environments, covering areas like identity and access management, network security, vulnerability management and incident response.
• Risk and control assessments across cloud and hybrid environments, with findings presented to senior stakeholders up to Board level.
• Developing actionable audit observations and recommendations to improve control frameworks across the business.

Skillset

• Hands-on audit or assurance experience with a cyber security focus. Someone who has been responsible for testing controls, not just advising on them.
• Solid technical knowledge of AWS and Azure, including misconfigurations, container security (Kubernetes/Docker) and cloud storage.
• Familiarity with cyber security frameworks such as NIST, CIS or ISO, and a working knowledge of the regulatory environment.
• A relevant professional qualification: CISA, CISM or CISSP, or equivalent.

…