senior cloud Security auditorThe VITO Consulting Group

Minimum of 3 years' experience in IT audit roles or relevant Cloud Engineering or Cloud Operations experience. Change Healthcare is open to non-traditional candidates that do not have formal IT audit experience and are willing to train on audit methodology and practices. Experience in performing technical security assessments within cloud environments (Amazon Web Services (AWS) strongly preferred) · Strong knowledge of cloud infrastructure including compute, networking, storage and other cloud services · Knowledge in cloud security, network security, application security, endpoint protection, data loss prevention, vulnerability management, and security incident response in traditional on-premise, virtual, container, and cloud environments · One of the following certifications: Certified Cloud Security Professional (CCSP), Certified Information Systems Auditor (CISA), Certified Information Systems and Security Professional (CISSP) certification. However, we will consider candidates who are willing to pursue and pass the Cloud Security Professional (CCSP) or similar designation within year of joining (if necessary). · Experience auditing against (or leveraging) IT frameworks and standards such as Cloud Security Alliance - Cloud Controls Matrix, SOX, CoBiT, COSO, NIST, ISO, HIPAA, HITRUST, PCI-DSS, etc.
Cloud certifications (AWS, Azure or other), Certificate of Cloud Security Knowledge (CCSK), Certificate of Cloud Auditing Knowledge (CCAK) preferred
Work independently to develop and implement highly complicated audits using IT control frameworks to assess the IT environment.
Develop audit plans accounting for specific risks / issues to be evaluated.
Conduct integrated and information technology audits in IT business process domains including but not limited to cloud computing strategy, infrastructure, security, operations, and governance, based upon a comprehensive understanding of risks and related standards or best practices.
Evaluate the design and operating effectiveness of cloud computing controls over the following areas at a minimum:
- cloud native services, configuration, etc.
- design and implementation
- architecture
- access management
- security
- SDLC, DevSecOps, Change Management, Release Management
- business continuity and disaster recovery
- incident and problem management
- services, deployment architecture and security services/features of cloud accounts, tenants, etc.
Identify process and control gaps and provide recommendations to address the risks identified.
Ensure that audit issues and associated root causes are understood, well defined, and presented to a wide variety of audit stakeholders.
Assist in the development of formal written reports to communicate audit results to management.
Contribute to driving efficiencies and enhancement opportunities to existing auditing processes and techniques, using data analytics, automation and other process improvement techniques and ideas.
Provide support for Sarbanes-Oxley (SOX) compliance and testing
Strong Communication & Presentation Skills/Executive Presence Experience serving as liaison between the department and key business partners/business executives in the development and execution of the audit plan. Builds and maintains key relationships with IT stakeholders to inform IT risk assessments and the audit plan. Support other department initiatives, special projects, and deliverables as needed. Must be able to quickly understand existing processes and diagnose control gaps, associated risks and improvement opportunities.
The VITO Consulting Group

Taguig City, Metro Manila
Permanent
Full-time