Cloud Engineer

Azure and/or AWS experience Terraform and/or Python\ Risk management and control design concepts

• What are the top 5-10 responsibilities for this position? (Please be detailed as to what the candidate is expected to do or complete on a daily basis) o Cloud Service Enablement Understand the controls applicable to a cloud service Review the implementation of cloud services via Terraform code or PAC. Document the control implementation of the cloud service Track open findings o Cloud Controls Assist with designing cloud controls Build process flows and process documents Support any findings related to the controls, The Cloud Compliance Engineer provides risk management support to line of business by identifying, documenting, and implementing monitoring controls to mitigate risk. The Cloud Compliance Engineer ensures that the controls used to mitigate business risks are properly designed, implemented, executed, and maintains compliance for the cloud environment. The Cloud Compliance Engineer promotes general awareness of risk management policies and issues and coordinates efforts to foster awareness and understanding of key risk management concepts within the business line network. They work with business line management to help ensure the implementation of key risk management practices and procedures in the normal course of business operations. The Cloud Compliance Engineer serve as a consult to ensure facilitation/oversight and response to inquiry/examination.

• What skills/technologies are required (please include the number of years of experience required)? o Azure and/or AWS experience o Terraform and/or Python o Risk management and control design concepts o Bachelor’s degree, or equivalent work experience o Seven or more years of experience with the processes, tools and techniques for assessing and controlling an organization’s exposure to risk. o Eight or more years of experience with a total Information Technology (IT) environment

• What skills/attributes are preferred (these are a desired, not required)? o Strong knowledge of risk management and control design concepts. o Experience in project management, strategic planning, analytical skills. o Knowledge of IT standards, procedures, policies, governance, audit, controls and compliance oversight. o Security Certifications: CISSP, CISA, CRISC, CISM o Cloud Certifications (AWS or Azure) o Ability to learn and communicate key risk management concepts. o Ability to interact with all levels of management. o Excellent presentation, verbal, and written communication skills o Cloud service provider certifications are preferred., Bachelor’s degree, or equivalent work experience Nine or more years of experience with the processes, tools and techniques for assessing and controlling an organization’s exposure to risk. Six or more years of experience with a total Information Technology (IT) environment Two or more years of management experience

Preferred Skills/Experience: Strong knowledge of risk management and control design concepts. Experience in project management, strategic planning, analytical skills. Knowledge of IT standards, procedures, policies, governance, audit, controls and compliance oversight. Security Certifications: CISSP, CISA, CRISC, CISM Cloud Certifications (AWS or Azure) Ability to learn and communicate key risk management concepts. Ability to interact with all levels of management. Excellent presentation, verbal, and written communication skills