> Markdown version of [/jobs/ext/579156-aws-cloud-governance-compliance-advisor-top-secret](https://www.wearedevelopers.com/jobs/ext/579156-aws-cloud-governance-compliance-advisor-top-secret). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AWS Cloud Governance & Compliance Advisor (Top Secret)

- **Company:** Ultraviolet Cyber
- **Location:** Springfield, VA, United States
- **Experience:** Expert
- **Salary:** $110,000.0 - $160,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cloud Computing Security, Capability Maturity Model Integration, Cyber Security, Information Systems
- **Published:** June 18, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=a7fc41374d0a2731

## About the Role

* 8+ years of experience in cybersecurity governance, risk, and compliance assessments
 * Expertise in regulatory frameworks and audit/assessment processes
 * Deep expertise in NIST, ISO, CSA CCM, and federal compliance frameworks

Core Certifications:

 * CISSP - broad coverage across governance, risk, and controls
 * CISM (Certified Information Security Manager) - governance and program oversight focus
 * CRISC (Certified in Risk and Information Systems Control) - risk management emphasis

Compliance-Specific:

 * CISA (Certified Information Systems Auditor)
 * ISO/IEC 27001 Lead Implementer or Lead Auditor
 * CCSK (Certificate of Cloud Security Knowledge)

Clearance Requirement:

 * Active TS/SCI with SCI Polygraph (or eligible)

## Description

* Review and evaluate cybersecurity governance frameworks, policies, standards, and procedures
 * Assess compliance with regulatory and industry standards such as:

o GDPR, HIPAA, SOC 2
o NIST Cybersecurity Framework (CSF)
o NIST SP 800-53
o ISO/IEC 27001
o Cloud Security Alliance (CSA) Cloud Controls Matrix

 * Apply maturity models (e.g., NIST CSF, CMMI) to establish a current-state baseline
 * Conduct interviews with compliance stakeholders and business leaders
 * Perform detailed document reviews (policies, procedures, audit reports)
 * Evaluate AWS governance processes and controls in regulated environments
 * Identify gaps in governance, risk management, and compliance capabilities
 * Develop actionable recommendations to improve governance structure and compliance posture


## Related Videos

- [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Containers in the cloud - State of the Art in 2022](https://www.wearedevelopers.com/videos/410-containers-in-the-cloud-state-of-the-art-in-2022)
- [Reliable scalability: How Amazon.com scales on AWS](https://www.wearedevelopers.com/videos/983-reliable-scalability-how-amazon-com-scales-on-aws)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)