Google Cloud Platform Controls Assessment Consultant

Role: Google Cloud Platform Controls Assessment Consultant

Duration: 3-4 months contract

Location: Remote

Position Overview

We are seeking a GCP Controls Assessment Consultant to support an advisory engagement focused on security, governance, compliance, and operational controls within a Google Cloud Platform environment. Working alongside a senior GCP engineering SME, this individual will gather evidence, perform control walkthroughs, document gaps, and help develop actionable remediation recommendations.

Key Responsibilities

• Support assessments of security, governance, compliance, and operational controls across the GCP environment.
• Conduct stakeholder interviews and control walkthroughs with cloud, security, infrastructure, risk, compliance, and audit teams.
• Gather and review policies, procedures, architecture documentation, system configurations, and technical evidence.
• Assess controls related to IAM, privileged access, service accounts, network security, encryption, logging, monitoring, vulnerability management, backup, and incident response.
• Map existing controls to applicable frameworks, internal standards, and regulatory requirements.
• Document control objectives, testing procedures, evidence reviewed, assessment results, risks, and identified gaps.
• Maintain workpapers, evidence trackers, meeting notes, issue logs, and other engagement documentation.
• Support the preparation and validation of findings, recommendations, management responses, and the prioritized remediation roadmap.

Required Qualifications

• Experience conducting cloud security, technology risk, IT controls, internal audit, or compliance assessments.
• Working knowledge of Google Cloud Platform and its core security and governance capabilities.
• Understanding of cloud IAM, networking, encryption, logging, monitoring, vulnerability management, and configuration management.
• Experience conducting walkthroughs, reviewing evidence, testing control design or implementation, and documenting conclusions.
• Strong analytical, documentation, organizational, and stakeholder-communication skills.