Cloud Data Security Assessment Consultant

We are seeking an experienced Cloud Data Security Assessment Consultant with strong expertise in Google Cloud Platform (GCP) security, data protection, application security, and security architecture assessments. The role will focus on evaluating enterprise cloud applications, data flows, integrations, and security controls across Finance, Supply Chain, ERP, and HCM environments.

The ideal candidate will have hands-on experience assessing encryption, Data Loss Prevention (DLP), Database Activity Monitoring (DAM), IAM, RBAC, privileged access, and cloud security controls. Experience with Oracle Cloud security assessments is preferred.

Required Technical Skills

• 6+ years of experience in cybersecurity, cloud security, application security, or security assessments.

• Strong hands-on experience with GCP Cloud and Data Security.

• Experience implementing or assessing:

  • Encryption for data at rest and in transit

  • Data Loss Prevention (DLP)

  • Database Activity Monitoring (DAM)

  • Data classification and protection controls

• Strong experience conducting Application Security Reviews and Security Architecture Assessments.

• Strong understanding of IAM, RBAC, privileged access management, authentication, and authorization.

• Experience with cloud security frameworks, security controls, and risk assessment methodologies.

• Hands-on scripting or automation experience using Python or Java.

• Experience reviewing APIs, integrations, application architectures, and enterprise data flows.

• Strong analytical, documentation, stakeholder management, and communication skills.

Preferred Skills

• Experience assessing Oracle Cloud applications, including Oracle Fusion ERP, SCM, Finance, or HCM.

• Knowledge of Oracle security models, roles, and Segregation of Duties (SoD).

• Experience with Oracle HSM, encryption, and key management solutions.

• Exposure to AWS and Azure security controls.

• Experience supporting security compliance, audits, governance, and regulatory requirements.

Roles & Responsibilities

• Conduct security assessments of cloud-hosted Finance, Supply Chain, ERP, and HCM applications.

• Review application architectures, APIs, integrations, and data flows to identify security risks.

• Assess implementation and effectiveness of encryption, DLP, DAM, IAM, and privileged access controls.

• Evaluate the protection of sensitive data, including PII, financial, payroll, supplier, and employee information.

• Review cloud-native security controls within GCP environments.

• Evaluate RBAC, SoD, user provisioning, authentication, and authorization processes.

• Perform security and risk assessments and provide actionable remediation recommendations.

• Partner with Cybersecurity, Enterprise Architecture, Infrastructure, and Application teams throughout the application lifecycle.

• Assess third-party vendors and SaaS platforms against applicable security and compliance requirements.

• Track remediation activities and validate implementation of security controls.

• Prepare security assessment reports, risk registers, executive summaries, and audit documentation.

• Support internal and external audits and regulatory reviews.

• Contribute to continuous improvement of security assessment methodologies, processes, and controls.