Define, document, and maintain cloud governance policies and standards across GCP, AWS, and Azure, and turn them into enforceable technical controls
Own the exception and waiver process end to end: intake, risk assessment, time-bound approval, expiry, and follow-up
Partner with Security to enforce Identity and Access Management and network security standards
Build and maintain dashboards that track governance metrics: security posture, key and credential rotation, policy violations, configuration drift, and time to remediation
Own resource labeling and tagging standards and enforce them
Drive cost governance: spend visibility and showback, anomaly detection, commitment and discount coverage reviews
Collaborate with IT, Finance, Security, DevOps, Cloud Architects, and Product Engineering to keep governance controls consistent
Work with stakeholders to define service level objectives, key performance indicators, and metrics for operational efficiency
Support the review of new third-party cloud services before they enter the estate
Requirements
4+ years working in public cloud environments, including at least 2 years hands-on with GCP
Hands-on experience implementing preventative guardrails in at least one hyperscaler (GCP Organization Policy, AWS SCPs or Config, Azure Policy)
Experience authoring a cloud policy or standard that other teams were required to follow
Experience running or contributing to an exception or waiver process for cloud controls
Working knowledge of cloud IAM, network security, encryption, and key and secret management
Infrastructure-as-Code with Terraform, and comfort extending it to policy-as-code
Python for automation, enforcement, and reporting
Demonstrated ability to explain a technical risk to a non-technical audience and drive a decision
Done for you
We'll apply to this for you
Denidel's HR team submits and tracks the application on your behalf.
