GRC Cloud Expert in Philadelphia, Pennsylvania

Governance, Risk, and Compliance Cloud Expert (Azure and Microsoft 365)

A leading healthcare is seeking a full-time Governance, Risk, and Compliance Cloud Expert. The Governance, Risk, and Compliance Cloud Expert is accountable for spearheading the organization's cloud governance and security posture management across the Azure and Microsoft 365 environment, ensuring sustained compliance with the organization's cloud security benchmark and the continuous reduction of cloud-based risk.

This position owns the design and ongoing maintenance of cloud-relevant policies, standards, and configuration baselines, and partners with cloud engineering to enforce secure configurations, remediate posture findings, and validate corrective actions. Provides targeted oversight of cloud-focused risk assessments, advises on governance priorities, and reports on cloud compliance and posture progress to leadership, advancing the organization's overall information security and compliance posture.

Responsibilities:

• Provide strategic vision and roadmap for cloud governance and compliance across the Azure and Microsoft 365 environment, aligning cloud GRC activities with organizational objectives and regulatory requirements.
• Design and continually enhance cloud-related information security policies, standards, and configuration baselines, including processes to manage and document exceptions.
• Provide oversight of targeted risk assessments that support cloud governance and compliance objectives, synthesizing findings to inform leadership on cloud security posture and emerging cloud-based risks.
• Spearhead cloud governance and security posture management across the Azure and Microsoft 365 environment, ensuring sustained compliance with the organization's cloud security benchmark and recommending control settings to restrict insecure configurations.
• Partner with cloud engineering to remediate posture findings, validate corrective actions, and report on remediation progress and overall cloud security posture to leadership.
• Collaborate with cross-functional teams, particularly cloud engineering, to integrate cloud governance, security, and compliance requirements into operational policies, processes, and platform standards.
• Mentor and coach GRC analysts supporting cloud governance and compliance activities, fostering operational excellence and professional growth.
• Develop dashboards and data pipelines to measure and communicate cloud compliance, posture progress, and related governance metrics to senior stakeholders.

Qualifications:

• Education
  
  - Required:
  
  Bachelor's Degree in science, technology, engineering, or math discipline
• Experience
  
  - Required:
  
  7 years related work experience
• Cloud governance and compliance across the Azure and Microsoft 365 environment
• Licenses and Certifications
  - Preferred: CISSP
  - Certified Information Systems Security Professional - ISC2