Cloud Governance Specialist

Mastery Consulting - Assessoria Em Sistemas de Informática Ltda.; Guararema; Ibrido; BRL 458.000 - 662.000; Tempo pieno

Descrizione del lavoro

Mastery Consulting seeks an experienced Cloud Governance Specialist to strengthen the GRC framework across hybrid/multi-cloud environments for a US client.

You will lead policy management, risk assessments, and governance automation, aligning with ISO 27001, NIST, GDPR, and SOC 2 while working with security, risk, and business teams worldwide.

Competenze

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• 5+ years of experience in Governance, Risk, Compliance (GRC), or Security roles, preferably in cloud or hybrid environments.
• Proven experience implementing IT Governance frameworks (e.g., COBIT, ITIL, ISO 27001).
• Strong knowledge of cloud platforms (Azure, AWS, or GCP) and governance capabilities such as Azure Policy, AWS Config, or GCP Organization Policy.
• Familiarity with cloud security concepts, compliance frameworks, and audit processes.
• Hands-on experience with tools such as ServiceNow, Power BI, or CSPM solutions.
• Professional Cloud Certification (e.g., Azure Administrator/Architect, AWS Solutions Architect, GCP Professional Cloud Architect) required.
• Advanced English (spoken and written) is mandatory for collaboration in global environments.

Mansioni

• Develop, implement, and maintain Cloud Governance policies, standards, and guardrails aligned with Well-Architected Framework and CAF.
• Ensure alignment between business requirements, security policies, and regulatory standards (ISO 27001, NIST, GDPR, SOC 2).
• Define governance metrics and dashboards to monitor compliance, security posture, and risk exposure.
• Support IT Risk and Compliance teams in evaluating cloud-related risks, performing risk assessments, and tracking mitigation plans.
• Manage documentation of compliance evidence for audits, certifications, and internal reviews.
• Identify governance gaps and propose practical remediation strategies.
• Collaborate with Cloud Engineering teams to assess cloud maturity and opportunities for improvement.
• Contribute to landing zone design, policy-as-code, and automation initiatives to enforce governance at scale.
• Support FinOps, DevSecOps, and operational excellence across environments.
• Work cross-functionally with Security, Infrastructure, DevOps, Finance, and Architecture teams to align governance with business outcomes.
• Provide strategic guidance to technical teams on risk mitigation, compliance requirements, and architecture best practices.
• Support governance-related training and awareness sessions for technical and business stakeholders.
• Maintain comprehensive documentation of governance processes, risk assessments, and compliance controls.
• Produce executive reports and dashboards summarizing compliance status, governance KPIs, and risk trends.
• Contribute to continuous improvement of governance frameworks and templates.

Conoscenze

GRC

Cloud governance

ISO 27001

NIST

GDPR

SOC 2

Azure/AWS/GCP

Azure Policy/AWS Config/GCP Org Policy

ServiceNow

Power BI

CSPM

FinOps

DevSecOps

Policy-as-code

Formazione

Bachelor’s degree in Computer Science, Information Systems, or related field

Strumenti

ServiceNow

Power BI

CSPM solutions

Descrizione del lavoro

Mastery Consulting, with over 30 years of experience delivering specialized IT consulting and technology solutions, is seeking an experienced Cloud Governance Specialist (his is a hibrid position) to join a strategic engagement with one of our U.S.-based clients.We are seeking a highly skilled Cloud Governance Specialist to strengthen our governance, risk, and compliance (GRC) framework across hybrid and multi-cloud environments. This role plays a key part in establishing governance standards, enhancing cloud maturity, and ensuring compliance with internal policies, industry best practices, and regulatory requirements. You will act as the bridge between technical cloud teams, risk and compliance functions, and business stakeholders, driving consistency, visibility, and accountability in cloud operations and decision-making.

Key Responsibilities

• 1. Cloud Governance & Policy Management
  • Develop, implement, and maintain Cloud Governance policies, standards, and guardrails aligned with the Well-Architected Framework and Cloud Adoption Framework (CAF).
  • Ensure alignment between business requirements, security policies, and regulatory standards (e.g., ISO 27001, NIST, GDPR, SOC 2).
  • Define governance metrics and dashboards to monitor compliance, security posture, and risk exposure.
• 2. Risk and Compliance
  • Support IT Risk and Compliance teams in evaluating cloud-related risks, performing risk assessments, and tracking mitigation plans.
  • Manage documentation of compliance evidence for audits, certifications, and internal reviews.
  • Identify governance gaps and propose practical remediation strategies.
• 3. Technical Enablement & Cloud Maturity
  • Collaborate with Cloud Engineering teams to assess the maturity level of cloud operations and identify improvement opportunities.
  • Contribute to landing zone design, policy-as-code, and automation initiatives to enforce governance at scale.
  • Support implementation of FinOps, DevSecOps, and operational excellence practices across environments.
• 4. Stakeholder Collaboration
  • Work cross-functionally with Security, Infrastructure, DevOps, Finance, and Architecture teams to align governance with business outcomes.
  • Provide strategic guidance to technical teams on risk mitigation, compliance requirements, and architecture best practices.
  • Support governance-related training and awareness sessions for technical and business stakeholders.
• 5. Documentation and Reporting
  • Maintain comprehensive and up-to-date documentation of governance processes, risk assessments, and compliance controls.
  • Produce executive reports and dashboards summarizing compliance status, governance KPIs, and risk trends.
  • Contribute to continuous improvement of governance frameworks and templates.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• 5+ years of experience in Governance, Risk, Compliance (GRC), or Security roles, preferably in cloud or hybrid environments.
• Proven experience implementing IT Governance frameworks (e.g., COBIT, ITIL, ISO 27001).
• Strong knowledge of cloud platforms (Azure, AWS, or GCP) and governance capabilities such as Azure Policy, AWS Config, or GCP Organization Policy.
• Familiarity with cloud security concepts, compliance frameworks, and audit processes.
• Hands-on experience with tools such as ServiceNow, Power BI, or Cloud Security Posture Management (CSPM) solutions.
• Professional Cloud Certification (e.g., Azure Administrator/Architect, AWS Solutions Architect, GCP Professional Cloud Architect) required.
• Advanced English (spoken and written) is mandatory for collaboration in global environments.

Preferred Qualifications (Nice to Have)

• Experience with FinOps, DevSecOps, or Cloud Center of Excellence (CCoE) initiatives.
• Knowledge of Infrastructure-as-Code (IaC) tools (Terraform, Bicep) and governance automation.
• Understanding of data protection regulations (GDPR, LGPD) and their impact on cloud operations.
• Experience in multi-cloud strategy, compliance automation, and governance dashboards.

Core Competencies

• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• Strategic mindset with a focus on operational execution.
• Ability to work autonomously and collaboratively in a global, fast-paced environment.
• Continuous improvement and innovation mindset.