Information Technology Governance Consultant

Insight Global; Charlotte (NC); On-site; USD 140,000 - 200,000; Full time

Job summary

Insight Global's client is building an enterprise-scale internal developer platform. We seek a Senior Cloud Governance Engineer to own compliance and audit readiness of the cloud platform, embedding governance into Terraform, automating evidence collection, and maintaining continuous readiness.

You will partner with platform architects and engineering teams to implement policy-as-code, CSPM tooling with Wiz, and real-time governance dashboards across subscriptions.

Qualifications

• Solid understanding of governance, risk, and compliance frameworks and control-mapping.
• Hands-on involvement in IT audits, evidence gathering, and remediation closure.
• Deep knowledge of SOC 2, ISO 27001, NIST, CIS and related cloud mappings.
• Proficiency with Azure Policy, Monitor, Workbooks, Defender for Cloud, and CSPM tooling.
• Ability to read and review Terraform code to enforce compliance in IaC patterns.
• Scripting skills (Python/PowerShell/Bash) and Azure-native automation experience.
• Experience building AI/LLM-powered governance tools and automating evidence workflows.
• Strong communication to translate audit findings to engineering and leadership.
• Influence to drive practical remediation with cross-functional teams.

Responsibilities

• Own end-to-end compliance lifecycle for cloud infra and audit readiness.
• Translate requirements into enforceable policy-as-code and guardrails.
• Design automated evidence collection and auditable processes.
• Review IaC patterns and update Terraform modules for standards.
• Operate CSPM tooling (Wiz) to identify misconfigurations and prioritize risk.
• Develop dashboards/workbooks in Azure Monitor for governance visibility.
• Build AI/LLM driven tools to accelerate governance workflows.
• Maintain GRC processes including risk registers, tests, exceptions, SLAs.
• Collaborate with platform architects, security, and app owners on findings.

Skills

GRC Fundamentals

IT Audit Experience

Cloud Compliance

Azure Governance Tooling

CSPM Tools Wiz

Terraform

Automation & Scripting

AI/LLM Apps

Communication & Influence

Tools

Azure Policy

Azure Monitor

Azure Workbooks

Microsoft Defender for Cloud

Management Groups/Subscriptions governance

Job description

Our client is building an enterprise-scale internal developer platform designed to eliminate infrastructure friction. Our goal is to provide application teams with a seamless experience that balances speed and flexibility with strict security, compliance, and cost governance. As a Senior Cloud Governance Engineer, you will own the compliance and audit posture of our cloud platform. You will ensure that the infrastructure we provision meets regulatory, security, and organizational standards. You will work closely with our platform architects and engineering teams to embed governance directly into our Terraform patterns, automate evidence collection, and maintain continuous audit readiness.

Key Responsibilities

• Compliance & Audit Readiness: Own the end-to-end compliance lifecycle for cloud infrastructure. Ensure environments are continuously aligned with organizational policies, regulatory frameworks (SOC 2, ISO 27001, NIST, CIS Benchmarks), and internal standards.
• Policy-as-Code: Translate compliance requirements into enforceable Azure Policy definitions, Terraform validation rules, and automated guardrails that prevent non-compliant resources from being deployed.
• Evidence Collection & Automation: Design and implement automated workflows for collecting, organizing, and presenting audit evidence. Reduce manual effort during audit cycles by building repeatable, auditable processes.
• Terraform Pattern Governance: Review and provide guidance on infrastructure-as-code patterns to ensure they meet compliance, security, and operational standards. Propose required updates to existing Terraform modules when standards evolve.
• Security Posture Management: Operate and optimize cloud security posture management (CSPM) tooling, primarily Wiz, to identify misconfigurations, prioritize risk, and drive remediation with engineering teams.
• Monitoring & Reporting: Build and maintain compliance dashboards and workbooks using Azure Monitor and Azure Workbooks to provide real-time visibility into governance posture across subscriptions and environments.
• AI-Powered Governance Tooling: Design and build AI/LLM-driven tools that accelerate governance workflows — such as automated control mapping, natural-language policy interpretation, intelligent evidence summarization, and anomaly detection across compliance data.
• GRC Program Support: Maintain and operate governance, risk, and compliance (GRC) processes — including risk register management, control testing schedules, exception tracking, and remediation SLA monitoring. Ensure alignment between cloud infrastructure controls and enterprise GRC frameworks.
• Cross-Functional Collaboration: Partner with platform architects, security teams, and application owners to interpret audit findings, recommend remediation paths, and ensure governance requirements are practical and achievable.

Required Skills & Experience

• GRC Fundamentals: Solid understanding of governance, risk, and compliance frameworks. Experience with risk assessment methodologies, control mapping, exception management, and working with GRC platforms (ServiceNow GRC, Archer, or similar).
• IT Audit Experience: Hands-on participation in both internal and external IT audits — scoping controls, gathering evidence, responding to auditor inquiries, and driving remediation of findings to closure.
• Cloud Compliance Expertise: Deep understanding of compliance frameworks (SOC 2, ISO 27001, FedRAMP, NIST, CIS) and how they map to cloud infrastructure configurations and controls.
• Azure Governance Tooling: Strong proficiency with Azure Policy, Azure Monitor, Azure Workbooks, Microsoft Defender for Cloud, and Management Groups/Subscription governance patterns.
• CSPM Tools (Wiz): Experience operating Wiz or comparable CSPM platforms (Prisma Cloud, Orca) for vulnerability detection, compliance scanning, and risk prioritization.
• Infrastructure as Code (Terraform): Solid understanding of Terraform. You can read, review, and recommend changes to HCL modules to enforce compliance standards — not just flag violations after the fact.
• Automation & Scripting: Ability to automate evidence collection and reporting workflows using scripting (Python, PowerShell, Bash) and Azure-native automation tools (Logic Apps, Azure Functions, Azure Automation).
• AI/LLM Application Development: Experience building internal tools or workflows leveraging large language models — prompt engineering, RAG patterns, or agent-based automation applied to operational or compliance use cases.
• Communication & Influence: You can translate technical audit findings into clear remediation guidance for engineering teams and articulate compliance posture to leadership and auditors