Online Cloud Security Policy Analyst

Naukri Mitra; United States; Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Annual salary: $129,000

100% remote — work from anywhere

Flexible work hours

Professional development budget

Generous PTO & holidays

Wellness stipend

Job summary

Naukri Mitra is seeking an Online Cloud Security Policy Analyst (Remote) to shape our cloud security posture. You’ll write practical policies, explain them to non-technical stakeholders, and drive alignment with major standards while collaborating with engineers and product teams.

You’ll assess risks, map controls to ISO 27001, SOC2, and NIST, and guide incident response and team education. This role emphasizes clear communication and hands-on cloud security expertise.

Qualifications

• Clear policy writing that is easy for non-technical teammates to follow.
• Hands-on cloud experience with AWS, Azure or GCP.
• Strong writing and communication skills for policy documentation.
• Attention to detail to spot security gaps in complex environments.
• Adaptability to evolving threats and changing requirements.

Responsibilities

• Develop and refine cloud security policies with clear, practical guidelines.
• Perform risk assessments and reviews of cloud designs and deployments.
• Map compliance to ISO 27001, SOC2 and NIST frameworks.
• Provide incident guidance to the security team during events.
• Lead short training sessions for cross-functional teams.

Skills

Policy translation

Cloud experience

Writing skills

Attention to detail

Adaptability

Tools

AWS

Azure

GCP

Job description

Online Cloud Security Policy Analyst (Remote) — $129,000 Annually

Step Into a Role That Shapes the Future of Cloud Security

Picture this — you’re sipping coffee at your favorite spot, laptop open, and you’re about to set the security tone for an entire cloud environment that thousands depend on. That’s the kind of impact we’re talking about here. We’re not just looking for someone to tick compliance boxes; we’re talking about a role where you’re the go‑to voice for how our cloud stays safe, reliable, and ahead of threats. Cloud technology is moving fast. Security risks evolve even faster. That’s why this role matters so much — and why we’re excited about what you could bring to the table.

What Your Day Could Look Like

Let’s get real. Some days you’ll be knee‑deep in policy reviews, making sure our cloud systems don’t just meet security standards but set the bar higher. Other days, you’ll be explaining those policies to folks outside the security bubble — like product managers who just want to roll out features without breaking compliance. Imagine starting your day by checking in with the engineering team about a new deployment. In the afternoon, you’re updating our cloud security framework to align with the latest NIST guidelines. And somewhere in between, you’re jumping into a quick huddle to celebrate a team win because we passed a security audit with zero findings. It’s a mix of deep technical thinking and real human interaction. You’re not just a policy writer; you’re a translator, a problem solver, and sometimes, the calm voice in a storm.

The Kind of Work You’ll Dive Into

Cloud Security Policy Development:

You’ll create and refine policies that keep our cloud environments safe. Think clear rules, easy‑to‑follow processes, and practical guidelines — not 100-page documents that no one reads.

Risk Assessment:

You’ll spot weaknesses before they become problems. That might mean reviewing a system design or running a cloud security scan and noticing something others overlooked.

Compliance Mapping:

You’ll make sure we align with major frameworks like ISO 27001, SOC2, and NIST. Not because we have to, but because we know it’s the right thing for long‑term trust.

Incident Guidance:

When something suspicious happens, you’re part of the first line of defense. You’ll help guide decisions that could be the difference between a small bump in the road and a situation that could spiral.

Team Education:

Policies are only as good as the people following them. You’ll run short, clear training sessions — the kind where people actually stay engaged because they see the “why” behind it.

Why This Role Feels Different

We’ve all read job postings that sound like they were copied from a security textbook. This isn’t that. Here, you’ll be given room to question the old ways of doing things. If a policy is slowing people down without adding real security value, we want to hear your ideas. If there’s a better tool, process, or approach, you’ll have the space to test it. You’ll also feel the human side of this job. Remote work can get a little quiet, right? We fix that with weekly team huddles, virtual coffee breaks, and the occasional "just because" meeting to swap stories and share laughs.

Skills That Help You Shine

Here’s what makes someone successful in this role:

• A knack for making complex security concepts simple. If you can explain a policy to a non‑technical teammate without making their eyes glaze over, you’ll fit right in.
• Hands‑on cloud experience. AWS, Azure, GCP — if you’ve worked with any of these and understand how they tick, that’s a big plus.
• Strong writing and communication skills. You’ll be drafting policies, so clear, direct language matters.
• An eye for detail. Spotting that one setting that could open a security gap is your kind of fun.
• Adaptability. Threats change, technology changes — you need to change with it.

A Glimpse at Our Team Culture

We’ve got a mix of people here — some who’ve been in cybersecurity for decades, others who made the switch from totally different careers. What we share is curiosity and a belief that good security is about people as much as technology. We celebrate wins. When our security updates roll out without slowing down operations, we high‑five (virtually). When we pass a tough compliance audit, we give credit where it’s due. And when things get tricky — like an unexpected system alert at 2 AM — we step up together. No finger‑pointing, no blame games. Just a team getting things done.

Tools and Tech You’ll Likely Use

We won’t overwhelm you with every tool in our stack, but here’s a peek at what might cross your desk:

• Cloud Platforms: AWS, Azure, GCP
• Security Frameworks: NIST, ISO 27001, SOC2
• Monitoring Tools: CloudTrail, Security Hub, Splunk
• Collaboration Tools: Slack, Jira, Confluence

If you’ve got other tools you love, we’re open to trying them. We care more about results than sticking to one vendor.

Challenges You’ll Help Solve

Here’s the truth — cloud security isn’t just about stopping hackers. It’s also about finding the balance between protection and productivity. Sometimes developers want to push code faster than our security checks allow. Sometimes compliance rules feel like they were written decades ago. And sometimes, people just don’t understand why a policy exists. That’s where you come in. You’ll help find that sweet spot where security is strong but the team can still move fast. You’ll make policies that aren’t just technically sound, but also realistic.

Your First 90 Days

Week 1-2:

You’ll meet the team, get access to our systems, and start reviewing our existing cloud security policies.

Month 1:

You’ll shadow policy reviews and start identifying quick wins — small changes that improve security without disrupting workflows.

Month 2:

You’ll lead your first policy update and run a short training session for a cross‑functional team.

Month 3:

You’ll own the policy cycle for one cloud service area, from assessment to final approval. By the end of your first 90 days, you’ll be fully embedded and making visible contributions.

The Perks That Come With It

• Annual Salary: $129,000
• 100% remote — choose your workspace, anywhere you’ve got a solid internet connection
• Work hours that let you perform at your best
• Professional development budget — we invest in your skills
• Generous PTO and paid holidays
• Wellness stipend (because healthy minds and bodies matter)

Why You Might Love This Job

You’ll have real influence. Your work won’t sit in a folder — it’ll guide how we protect our systems and keep our customers’ trust. You’ll grow your skills fast. Cloud security is always evolving, and we’ll make sure you’re at the frontier. And you’ll be part of a team that’s as passionate about people as they are about security.

So, ready to step up and make your mark in cloud security? We’re ready to meet you.

Global Applicants Welcome:

Candidates from the United States, Canada, United Kingdom, European Union, Australia, India and other eligible regions worldwide are encouraged to apply.