What are the top 3 skills required for this role?
o GCP IAM
o VPC / Shared VPC
o Cloud Run / GKE
o BigQuery
o Cloud Storage
o Datastore / Firestore
o Cloud KMS / Secret Manager
Job Description/ Responsibilities Job Description: Data Security Architecture Assessment
Focus: Security assessment of GCP-based conversational AI, telephony, API, and backend integration architecture.
Responsibilities
• Assess the end-to-end architecture from a data security and privacy standpoint.
• Review data flows across:
o GCP service projects
o Virtual agents / conversational AI
o Telephony platforms
o API proxies
o Datastore, BigQuery, Cloud Storage
o On-prem / Client systems of record
• Identify risks related to:
o Customer data exposure
o PII handling
o Authentication and authorization
o Encryption in transit and at rest
o Secrets and key management
o Logging, monitoring, and auditability
o Data retention and deletion
o Cross-boundary data movement
• Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.
• Implement Sentinel policies for enforcing encryption standards.
• Implement database activity monitoring and blocking rules in GCP.
• Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
• Produce findings report with risk ratings, gaps, and remediation recommendations.
Required Skills
• Strong experience in cloud security architecture, preferably Google Cloud Platform.
• Hands-on knowledge of:
o GCP IAM
o VPC / Shared VPC
o Cloud Run / GKE
o BigQuery
o Cloud Storage
o Datastore / Firestore
o Cloud KMS / Secret Manager
• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.
• Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects.
• Understanding of logging, SIEM integration, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.
Preferred Skills
• Experience with conversational AI / virtual agent platforms.
• Knowledge of telephony/SIP integrations and contact center platforms.
• Experience with PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards.
• Familiarity with AI data governance, model safety, and GenAI security risks.
• Cloud Security Architecture (GCP Focus): Strong expertise in designing and assessing cloud security architectures, specifically within Google Cloud Platform.
• GCP Security & Infrastructure Controls: Hands-on experience with core GCP security and data tools, including IAM, VPC / Shared VPC, Cloud Run/GKE, BigQuery, Cloud Storage, Datastore/Firestore, and Cloud KMS / Secret Manager.
• Data Protection & Compliance: Demonstrated experience assessing data protection controls for sensitive and regulated customer data, including PII and PCI.