Data Security Assessor

Skills Required Candidates with strong hands-on GCP data security, with experience in assessing and implementing encryption, DLP and DAM controls. Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.

Request ID: 103757-1
Title: Data Security Assessor
Location: Phoenix, AZ
Duration: 6 months
Pay Range: $40 - $43/Hour on W2/C2C (All inclusive)

Role Description:

• Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.
• Implement Sentinel policies for enforcing encryption standards.
• Implement database activity monitoring and blocking rules in GCP.
• Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
• Produce findings report with risk ratings, gaps, and remediation recommendations.
• Review application architecture, integrations, APIs, and data flows to identify security risks.
• Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
• Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation.
• Review encryption standards for data at rest and in transit.
• Assess third-party vendors and cloud solutions for security and compliance requirements.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.

Skills Required

• Candidates with strong hands-on GCP data security, with experience in assessing and implementing encryption, DLP and DAM controls.
• Security assessment of GCP-based conversational AI, telephony, API, and backend integration architecture.
• Strong experience in cloud security architecture, preferably Google Cloud Platform.
• Hands-on knowledge of:
  • GCP IAM
  • VPC / Shared VPC
  • Cloud Run
  • GKE
  • BigQuery
  • Cloud Storage
  • Datastore
  • Firestore
  • Cloud KMS
  • Secret Manager

• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Understanding of logging, SIEM integration, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.

Nice to Have

• Experience conducting security architecture or application security reviews.
• Understanding of cloud platforms such as Google Cloud.
• Hands-on experience with security automation using Java or Python.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Familiarity with vulnerability management and risk assessment methodologies.
• Strong analytical, documentation, and communication skills.
• Ability to work effectively with cross-functional business and technical teams.

Keywords

• Oracle HSM Integrations
• Application Security Reviews
• GCP IAM

Experience Required

• 6–9 Years

 
Appreciate your quick response and please feel free to reach me out for any query you may have.

Thanks