Senior Analyst | Governance and Policy Development | Mumbai | Cyber Strategy & Transformation (Mumbai, IN)
Deloitte
Deloitte
Join our dynamic cybersecurity team as a Cloud Security & Cloud Governance Analyst. This role is perfect for early-career professionals keen on cloud technologies, robust security practices, and governance frameworks. You will play a crucial part in supporting cloud security operations, governance initiatives, compliance tasks, and security monitoring across leading cloud environments like AWS, Microsoft Azure, and Google Cloud Platform.
We are dedicated to helping organizations prevent cyberattacks and safeguard their valuable assets, ensuring they are secure, vigilant, and resilient. Our approach integrates cyber risk management into the core of strategy development for effective information and technology risk management.
Key responsibilities include assisting in the implementation and maintenance of cloud security controls across AWS, Azure, and GCP.
Support vital cloud governance initiatives, encompassing policy enforcement, resource tagging, and compliance monitoring.
Monitor cloud environments for security alerts, misconfigurations, and vulnerabilities, and participate actively in cloud security assessments, audits, and risk evaluations.
Help identify and remediate cloud security posture issues using CSPM tools and review Identity and Access Management (IAM) configurations for adherence to security best practices.
Assist in implementing security best practices such as least privilege, encryption, logging, and multi-factor authentication, while supporting compliance activities for standards like ISO 27001, SOC 2, CIS Benchmarks, PCI DSS, or GDPR.
Collaborate effectively with infrastructure, DevOps, and application teams to ensure secure cloud deployments and prepare comprehensive documentation for cloud governance policies, standards, procedures, and audit evidence.
We are seeking candidates with a foundational understanding of cloud platforms including AWS, Azure, or GCP, and a solid grasp of cloud security concepts such as IAM, networking, encryption, logging, and monitoring.
Familiarity with cloud governance principles and security frameworks is essential. A good understanding of networking fundamentals (TCP/IP, DNS, Firewalls, VPNs) and basic knowledge of Linux and Windows operating systems are required.
An advantage would be familiarity with scripting languages like PowerShell, Python, or Bash, and an understanding of security tools like Microsoft Defender for Cloud, AWS Security Hub, Azure Policy, or AWS Config. Strong analytical, problem-solving, and troubleshooting skills, along with excellent written and verbal communication, and the ability to work collaboratively in a team environment are key.
Educationally, a Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field is required. Relevant certifications are preferred but not mandatory.
Deloitte
Cybersecurity