Google Cloud Platform Controls Assessment Consultant
- 1Point System LLC
14 Hours Ago
NA
C2C
Remote
8-10 Years
Required Skills: Google Cloud Platform, GCP, Cloud security and governance, Technology risk, IT controls, internal audit, compliance assessments, GCP IAM, Privileged access, Service accounts, Network security, Encryption, Logging and monitoring, Vulnerability management, Configuration management, Backup and incident response, Control walkthroughs, Evidence collection and review, Control design, implementation testing, Gap identification, Risk assessment, Strong documentation and stakeholder communication
Job Description
Position Overview
We are seeking a GCP Controls Assessment Consultant to support an advisory engagement focused on security, governance, compliance, and operational controls within a Google Cloud Platform environment. Working alongside a senior GCP engineering SME, this individual will gather evidence, perform control walkthroughs, document gaps, and help develop actionable remediation recommendations.
Key Responsibilities
- Support assessments of security, governance, compliance, and operational controls across the GCP environment.
- Conduct stakeholder interviews and control walkthroughs with cloud, security, infrastructure, risk, compliance, and audit teams.
- Gather and review policies, procedures, architecture documentation, system configurations, and technical evidence.
- Assess controls related to IAM, privileged access, service accounts, network security, encryption, logging, monitoring, vulnerability management, backup, and incident response.
- Map existing controls to applicable frameworks, internal standards, and regulatory requirements.
- Document control objectives, testing procedures, evidence reviewed, assessment results, risks, and identified gaps.
- Maintain workpapers, evidence trackers, meeting notes, issue logs, and other engagement documentation.
- Support the preparation and validation of findings, recommendations, management responses, and the prioritized remediation roadmap.
Required Qualifications
- Experience conducting cloud security, technology risk, IT controls, internal audit, or compliance assessments.
- Working knowledge of Google Cloud Platform and its core security and governance capabilities.
- Understanding of cloud IAM, networking, encryption, logging, monitoring, vulnerability management, and configuration management.
- Experience conducting walkthroughs, reviewing evidence, testing control design or implementation, and documenting conclusions.
- Strong analytical, documentation, organizational, and stakeholder-communication skills.
Preferred Qualifications
- Previous experience assessing GCP environments or cloud-specific controls.
- Familiarity with NIST CSF, NIST 800-53, CIS Controls, the CIS Google Cloud Benchmark, ISO 27001, SOC 2, or COBIT.
- Google Cloud Digital Leader, Associate Cloud Engineer, CISA, CCSK, or a related cloud, security, or audit certification.
- Experience with GRC platforms and evidence-management tools.
