Job description_About the Role_We are seeking a talented individual to execute Project Security Assessments (PSAs) and related security reviews for applications, infrastructure, and associated components undergoing cloud migration initiatives. The contractor operates under the direction of the designated Security Partner, applying established security procedures and requirements to each assessment rather than setting business unit security strategy or making independent risk decisions.
This is an execution-focused role, distinct from the Security Partner position. The contractor is not expected to advise business leadership, represent the business unit to security governance organizations, or make risk acceptance or policy exception decisions.
Such decisions are escalated to and retained by the Security Partner. A day in this role_Manage a portfolio of Project Security Assessments (PSAs) in line with service level agreements, completing assessments for each workstream and migration path according to established security requirements.
Facilitate the submission, review,
and tracking of issues and exceptions to security controls identified during assessments, escalating business-critical issues and exception decisions to the Security Partner.
Assist in the completion of thematic and risk-driven security assessments for cloud migration initiatives, including security validations against AWS-native controls, such as:o IAMo Security Groups / NACLso KMS / Encryptiono WAFo CloudTrail / CloudWatch logging and monitoringo GuardDuty / Configo Vulnerability scanning· Coordinate penetration testing activities where required.o Maintain a working understanding of information security risks related to cloud migration projects, identifying situations where risk assessments, reviews, or risk-rating changes require Security Partner involvement.o Keep assessment status current and visible by maintaining clear progress notes and outstanding items in the organization's GRC platform, and