Position Overview
Establishes cloud governance, control frameworks, policy standards, compliance evidence processes, and operational accountability mechanisms.
Key Responsibilities
- Develop cloud governance policies, standards, guardrails, operating procedures, and compliance monitoring processes.
- Define resource naming standards, tagging policies, account/subscription structures, access controls, logging requirements, and configuration baselines.
- Support control mapping to NIST CSF, NIST 800-53, state policy, agency policy, privacy requirements, and other applicable regulations.
- Coordinate compliance evidence collection, audit support, control validation, remediation tracking, and continuous monitoring.
- Develop governance dashboards, policy exception processes, risk registers, and executive compliance reporting.
- Partner with architects and automation engineers to implement policy-as-code and compliance-as-code controls.
Minimum Qualifications
5+ years in IT governance, cybersecurity compliance, risk management, audit support, or cloud governance. Knowledge of NIST, FedRAMP concepts, security controls, cloud governance, and control evidence. CISA, CRISC, CGRC, Security+, CISSP, ITIL, or comparable credential preferred.
About This Opportunity
This is a full-time remote position supporting current and upcoming JJT & Associates client work. Specific client requirements, schedules, security requirements, clearances, and other project details may vary by engagement.
JJT & Associates is committed to a professional and inclusive workplace. Employment decisions are based on qualifications, merit, business need, and the requirements of the applicable engagement.