Sobre a vaga
About the Role:
We are looking for a Senior Cloud Security Analyst (Analyst II) to administer and enhance the security posture of enterprise cloud environments hosting regulated healthcare data. This role is responsible for managing cloud security platforms, configuring security guardrails, driving cloud governance activities, and improving security automation and reporting. You will work closely with cloud, engineering, DevOps, and security teams to strengthen cloud security controls, ensure compliance, and support the adoption of enterprise cloud security standards.
This is an excellent opportunity for a cloud security professional with hands-on AWS security experience who enjoys owning cloud security platforms, leading governance activities, and driving continuous security improvements.
Ideal Candidate:
The ideal candidate has strong hands-on experience with AWS security and cloud security platforms and enjoys the administrative and governance aspects of cloud security. You are comfortable configuring policies, managing cloud security tools, automating workflows, building dashboards, and driving remediation efforts. You possess strong analytical and problem-solving skills and can effectively collaborate with both technical teams and leadership stakeholders.
You have experience reviewing cloud risks, IAM permissions, compliance requirements, and security findings, while helping teams improve their security posture through practical recommendations and governance processes.
Major Responsibilities:
- Administer and maintain cloud security platforms, policies, integrations, and security controls.
- Configure cloud governance guardrails, compliance controls, and security policies.
- Build and maintain cloud security dashboards, reports, and security metrics.
- Develop and manage automation workflows for security findings and remediation tracking.
- Lead cloud IAM governance reviews and identify excessive privilege or access risks.
- Prioritize and track cloud security risks, vulnerabilities, and remediation activities.
- Investigate and support complex cloud security incidents and escalations.
- Oversee vulnerability management and container security governance activities.
- Conduct cloud security posture reviews and compliance assessments.
- Support audit readiness activities and cloud compliance evidence collection.
- Partner with engineering and cloud teams to improve cloud security controls and standards.
- Contribute to cloud security architecture reviews and cloud security strategy initiatives.
- Provide guidance and support to junior Cloud Security Analysts.
Experience Requirement:
- Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related field.
- 3-5 years of experience in cloud security, cloud engineering, security operations, or a related technical role.
- Minimum 2 years of hands-on experience securing and managing AWS environments.
- Experience administering cloud security platforms such as CSPM or CNAPP solutions.
- Strong knowledge of AWS security services, IAM, networking, encryption, logging, and cloud security best practices.
- Experience managing cloud security policies, guardrails, governance controls, and compliance requirements.
- Knowledge of cloud IAM, least-privilege access models, policy analysis, and privilege escalation risks.
- Experience with cloud vulnerability management, remediation tracking, and risk prioritization.
- Ability to create dashboards, metrics, and reports for technical and leadership audiences.
- Hands-on scripting experience using Python or Bash.
- Familiarity with Infrastructure as Code tools such as Terraform or CloudFormation.
- Strong analytical, troubleshooting, communication, and stakeholder management skills.
Good to Have:
- AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, or equivalent certifications.
- Experience with Wiz, Prisma Cloud, Lacework, Defender for Cloud, or similar CNAPP/CSPM platforms.
- Experience implementing security automation and workflow orchestration.
- Exposure to Microsoft Azure and/or Google Cloud Platform.
- Experience working within healthcare, healthcare technology, or other regulated industries.
- Knowledge of CIS Benchmarks, SOC 2, HITRUST, HIPAA, and cloud compliance frameworks.
- Experience supporting cloud security architecture reviews and cloud migration projects.
- Experience mentoring junior analysts and leading governance activities.
IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialization of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at https://jobs.iqvia.com
IQVIA is committed to integrity in our hiring process and maintains a zero tolerance policy for candidate fraud. All information and credentials submitted in your application must be truthful and complete. Any false statements, misrepresentations, or material omissions during the recruitment process will result in immediate disqualification of your application, or termination of employment if discovered later, in accordance with applicable law. We appreciate your honesty and professionalism.