Cloud Security Consultant

About the role

The Cloud Security Consultant supports and governs security controls across multi-cloud environments, including AWS, Azure, and Google Cloud Platform (GCP). The role involves providing risk-based security consulting, reviewing, and advisory services across cloud onboarding, architecture, and operations.

Responsibilities

• Support Cloud Governance Approval (CGA) and Security Process Integration (SPI) activities, ensuring alignment to defined metrics, reporting requirements, and operational standards.
• Document and maintain cloud security processes, procedures, guidebooks, and playbooks.
• Identify opportunities to automate existing manual processes to improve efficiency and scalability.
• Perform risk reviews of cloud environments, gathering and validating evidence to support decisions on CGA requests.
• Conduct quality assurance (QA) reviews for Azure and AWS CGA cases to ensure alignment with security standards.
• Support high-volume governance operations, managing over 2,000+ Azure and AWS policy evaluations monthly.
• Maintain and enhance cloud control libraries for AWS and Azure by capturing new controls and documenting updates.
• Execute and support SPI processes, including tracking, measuring, and reporting on key security metrics.

Requirements

• Education: Bachelor’s degree in Information Systems or Computer Science, or an equivalent combination of education and work experience in Cloud Security.
• Experience: 5+ years of experience in information security, cloud security, or risk consulting.
• Technical Skills: Working knowledge of AWS and Azure. Familiarity with Cloud security frameworks (NIST, CIS, ISO) and Cloud-native controls and architectures. Strong analytical skills with the ability to evaluate data for risk decisions. Experience with Jira/Kanban workflows and Excel-based reporting and data tracking.

Preferred Qualifications

• Experience supporting CGA, governance, or security approval workflows.
• Exposure to cloud security tools such as AWS Security Hub, Azure Defender, or GCP SCC.
• Willingness to develop expertise in Google Cloud Platform (GCP).
• Relevant certifications (e.g., AWS, Azure, GCP, CISSP, CCSP).

Benefits

Everforth Apex offers a comprehensive benefits package including medical, dental, vision, life, disability, and other insurance plans, an ESPP (employee stock purchase program), a 401K program with a company match, and a Health Savings Account (HSA) on the HDHP plan. Additionally, we provide a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program, and other discounts. Professional development includes an on-demand training program, access to certification prep and a library of technical and leadership courses/books/seminars, and certification discounts and other perks to associations like CompTIA and IIBA. For additional resources, visit our Welcome Packet provided by an Everforth Apex team member. Everforth Apex is an equal opportunity employer and considers qualified applicants with criminal histories in a manner consistent with applicable law.