Senior Cloud Governance Engineer - AI-Driven Compliance & Policy

Kforce Inc; Charlotte (NC); Presencial; USD 130.000 - 180.000; Jornada completa

Descripción de la vacante

Kforce Inc. is seeking a Security & Compliance Engineer to lead the end-to-end governance of cloud infrastructure. The role focuses on policy-as-code, Terraform validation, and automated audit evidence workflows to support SOC 2, ISO 27001, and NIST controls.

The candidate will operate CSPM tooling (Wiz), build governance dashboards in Azure Monitor, and collaborate with engineering to remediate findings and improve security posture across multiple subscriptions.

Formación

• GRC fundamentals including control mapping and remediation SLA tracking.
• Hands-on IT audits: scoping controls and collecting evidence.
• Knowledge of SOC 2, ISO 27001, NIST 800-53, CIS Benchmarks.
• Azure governance: policy inheritance, Defender for Cloud, Azure Monitor.
• Experience with Wiz or similar CSPM (Prisma Cloud/Orca).
• Read Terraform to understand remediation changes.
• AI-assisted workflows with command-line tools, Git, and QA of outputs.
• Backlog management across multiple teams with risk-based tradeoffs.

Responsabilidades

• Own end-to-end compliance lifecycle for cloud infrastructure and ensure alignment with policies and standards.
• Translate requirements into Azure Policy definitions, Terraform validation rules, and guardrails.
• Design automated workflows for collecting and presenting audit evidence.
• Review Terraform patterns to ensure compliance and propose updates.
• Operate CSPM tooling (Wiz) to identify misconfigurations and drive remediation.
• Build and maintain compliance dashboards and workbooks with Azure Monitor.
• Design and build AI/LLM-driven governance tools for control mapping and evidence summarization.
• Maintain governance, risk, and compliance processes including risk register and remediation SLA monitoring.

Conocimientos

GRC Fundamentals

IT Audit Experience

Communication & Influence

Prioritization & Program Management

AI-Assisted Workflows

Infrastructure as Code Literacy

Azure Governance

Policy-as-Code

Herramientas

Azure Policy

Terraform

Wiz

Microsoft Defender for Cloud

Azure Monitor

Descripción del empleo

Kforce Inc. is seeking a Security & Compliance Engineer to lead the end-to-end governance of cloud infrastructure. The role focuses on policy-as-code, Terraform validation, and automated audit evidence workflows to support SOC 2, ISO 27001, and NIST controls.

The candidate will operate CSPM tooling (Wiz), build governance dashboards in Azure Monitor, and collaborate with engineering to remediate findings and improve security posture across multiple subscriptions.