AVP || Internal Audit - Cloud Security & DevSecOps

Key Responsibilities

• Evaluate cloud configurations and governance across AWS, Azure, and GCP.
• Assess minimum security baselines and control effectiveness in multi-cloud environments.
• Support audit walkthroughs and evidence validation for serverless functions (AWS Lambda, Azure Functions), container platforms (EKS / AKS), and services like S3, RDS.
• Interpret CI / CD pipeline configurations and DevSecOps tooling (e.g., Jenkins, Harness, Snyk, HashiCorp Vault).
• Collaborate with architecture and engineering teams to validate control designs and remediation actions.
• Review IAM roles, network segmentation, and API security controls.
• Contribute to audit planning, issue verification, and management response drafting.

Required Skills & Experience