Senior Associate - RC TRC Cloud Security

Position Summary:

We are seeking a highly skilled and experienced Cloud Security Audit Associate to lead and execute comprehensive cloud security and resilience assessments across enterprise environments. This role requires a strong blend of audit methodology, cloud engineering expertise, and risk advisory capabilities to evaluate cloud service provider (CSP) risks, enterprise control effectiveness, and application-level implementations.

Lead cloud security and resilience audits across AWS, Azure, and GCP platforms.

Evaluate CSP risk indicators, SLAs, compliance attestations, and shared responsibility matrices.

Assess enterprise control sets for traceability, automation, and alignment with compliance frameworks (e.g., SOC, PCI, HITRUST, CIS, NIST).

Review SDLC, production readiness, and application onboarding processes for control validation.

Conduct sample assessments of critical and non-critical cloud applications to validate control implementation and resilience planning.

Deliver detailed audit reports, executive summaries, and strategic recommendations.

Collaborate with cross-functional teams including Cloud Engineering, DevOps, Risk, and Internal Audit.

Support clients in aligning cloud programs with regulatory requirements and industry best practices.

Bachelors and/or masters degree in information systems, Cybersecurity, or related field.

5+ years of experience in IT audit, cloud security, or risk consulting.

Excellent communication skills, with fluency in Englishboth written and verbalto effectively engage with global clients, present findings, and lead stakeholder discussions.

Professional certifications such as CISA, CISSP, CCSP, CTPRA, or cloud-specific credentials (AWS, Azure, GCP).

Strong understanding of cloud infrastructure components (VMs, containers, serverless, networking).

Familiarity with compliance frameworks and benchmarks (SOC, PCI, HITRUST, CIS, CSA CCM, NIST 800-53).

Flexibility to work in U.S. time zones and support cross-border engagements.

Preferred Skills:

Prior experience in a Big 4 or similar consulting environment.

Experience working in global/multinational teams.

Hands-on experience with Infrastructure as Code (IaC), Policy as Code (PaC), DevSecOps, and cloud automation.

Ability to assess cloud application architecture for security and resilience risks.

Strong analytical, documentation, and stakeholder engagement skills.