Hi
Role: GRC Engineer/Analyst
Phoenix Arizona
Onsite Role
Contract
Mandatory Skill: GRC & SAAS
Key Responsibilities
Perform security assessments of SaaS and third party vendors.
Evaluate vendor controls documentation and compliance certifications (SOC 2 ISO GDPR etc.).
Analyse shared responsibility models and identify security gaps.
Review controls across IAM network security and data protection.
Apply InfoSec principles to assess risks and recommend mitigations.
Required Skills & Qualifications
Strong experience in SaaS assessments vendor risk management or cloud security.
Good understanding of shared responsibility models across cloud providers.
Knowledge of regulatory and control frameworks (ISO SOC 2 NIST GDPR etc.).
Hands on expertise in IAM network security and data protection mechanisms.
Familiarity with InfoSec principles such as access governance secure architecture and risk assessment methodologies.
Ability to communicate findings to technical and non technical stakeholders.
Certifications (preferred):
CCSK CCSP CISA CISSP ISO 27001 LA/LI or similar.
Nice to Have
Experience working with GRC tools.
Background in cloud platforms (AWS Azure GCP).
Familiarity with SaaS procurement lifecycle.
Hi Role: GRC Engineer/Analyst Phoenix Arizona Onsite Role Contract Mandatory Skill: GRC & SAAS Key Responsibilities Perform security assessments of SaaS and third party vendors. Evaluate vendor controls documentation and compliance certifications (SOC 2 ISO GDPR etc.). Analyse shared resp...
Hi
Role: GRC Engineer/Analyst
Phoenix Arizona
Onsite Role
Contract
Mandatory Skill: GRC & SAAS
Key Responsibilities
Perform security assessments of SaaS and third party vendors.
Evaluate vendor controls documentation and compliance certifications (SOC 2 ISO GDPR etc.).
Analyse shared responsibility models and identify security gaps.
Review controls across IAM network security and data protection.
Apply InfoSec principles to assess risks and recommend mitigations.
Required Skills & Qualifications
Strong experience in SaaS assessments vendor risk management or cloud security.
Good understanding of shared responsibility models across cloud providers.
Knowledge of regulatory and control frameworks (ISO SOC 2 NIST GDPR etc.).
Hands on expertise in IAM network security and data protection mechanisms.
Familiarity with InfoSec principles such as access governance secure architecture and risk assessment methodologies.
Ability to communicate findings to technical and non technical stakeholders.
Certifications (preferred):
CCSK CCSP CISA CISSP ISO 27001 LA/LI or similar.
Nice to Have
Experience working with GRC tools.
Background in cloud platforms (AWS Azure GCP).
Familiarity with SaaS procurement lifecycle.
View more
View less