Role: Google Cloud Platform Controls Assessment Consultant
Duration: 3-4 months contract
Location: Remote
Position Overview
We are seeking a GCP Controls Assessment Consultant to support an advisory engagement focused on security, governance, compliance, and operational controls within a Google Cloud Platform environment. Working alongside a senior GCP engineering SME, this individual will gather evidence, perform control walkthroughs, document gaps, and help develop actionable remediation recommendations.
Key Responsibilities
- Support assessments of security, governance, compliance, and operational controls across the GCP environment.
- Conduct stakeholder interviews and control walkthroughs with cloud, security, infrastructure, risk, compliance, and audit teams.
- Gather and review policies, procedures, architecture documentation, system configurations, and technical evidence.
- Assess controls related to IAM, privileged access, service accounts, network security, encryption, logging, monitoring, vulnerability management, backup, and incident response.
- Map existing controls to applicable frameworks, internal standards, and regulatory requirements.
- Document control objectives, testing procedures, evidence reviewed, assessment results, risks, and identified gaps.
- Maintain workpapers, evidence trackers, meeting notes, issue logs, and other engagement documentation.
- Support the preparation and validation of findings, recommendations, management responses, and the prioritized remediation roadmap.
Required Qualifications
- Experience conducting cloud security, technology risk, IT controls, internal audit, or compliance assessments.
- Working knowledge of Google Cloud Platform and its core security and governance capabilities.
- Understanding of cloud IAM, networking, encryption, logging, monitoring, vulnerability management, and configuration management.
- Experience conducting walkthroughs, reviewing evidence, testing control design or implementation, and documenting conclusions.
- Strong analytical, documentation, organizational, and stakeholder-communication skills.