Senior Cloud Governance Engineer

DescriptionKforce has a client in Charlotte, NC that is seeking a Senior Cloud Governance Engineer.Key Responsibilities:* Compliance & Audit Readiness: Own the end-to-end compliance lifecycle for cloudinfrastructure; Ensure environments are continuously aligned with organizational policies,regulatory frameworks (SOC 2, ISO 27001, NIST, CIS Benchmarks), and internal standards* Policy-as-Code: Translate compliance requirements into enforceable Azure Policy definitions,Terraform validation rules, and automated guardrails that prevent non-compliant resources frombeing deployed* Evidence Collection & Automation: Design and implement automated workflows for collecting,organizing, and presenting audit evidence; Reduce manual effort during audit cycles by buildingrepeatable, auditable processes* Terraform Pattern Governance: Review and provide guidance on infrastructure-as-codepatterns to ensure they meet compliance, security, and operational standards; Propose requiredupdates to existing Terraform modules when standards evolve* Security Posture Management: Operate and optimize cloud security posture management(CSPM) tooling, primarily Wiz, to identify misconfigurations, prioritize risk, and drive remediationwith engineering teams* Monitoring & Reporting: Build and maintain compliance dashboards and workbooks usingAzure Monitor and Azure Workbooks to provide real-time visibility into governance postureacross subscriptions and environments* AI-Powered Governance Tooling: Design and build AI/LLM-driven tools that accelerategovernance workflows - such as automated control mapping, natural-language policyinterpretation, intelligent evidence summarization, and anomaly detection across compliancedata* GRC Program Support: Maintain and operate governance, risk, and compliance (GRC)processes - including risk register management, control testing schedules, exception tracking,and remediation SLA monitoringRequirements* GRC Fundamentals: Strong grounding in governance, risk, and compliance, including controlmapping, risk assessment, exception management, and remediation SLA tracking* IT Audit Experience: Hands-on experience with internal and external IT audits: scoping controls,assembling evidence, answering auditor questions, and driving findings to closure* Compliance Frameworks: Working knowledge of SOC 2, ISO 27001, NIST 800-53, and CISBenchmarks, and the ability to read an internal standard and tell which technical requirement acontrol actually imposes* Azure Governance: Solid understanding of Azure Policy, management groups and policyinheritance, Microsoft Defender for Cloud, and Azure Monitor* CSPM Tools (Wiz): Experience using Wiz or a comparable CSPM platform (Prisma Cloud, Orca) to investigate findings, judge their accuracy, and know where the tool's coverage stops* Infrastructure as Code Literacy: Able to read Terraform well enough to understand what aremediation changes and to write good acceptance criteria* AI-Assisted Workflows: Comfortable using AI-assisted tools and command-line workflows,working in Git, and critically checking AI-generated output before relying on it* Prioritization & Program Management: A record of running a backlog across several teams,making risk-based tradeoffs, and keeping work moving without direct authority* Communication & Influence: Able to turn technical findings into clear remediation guidance forengineers, precise questions for compliance, and a concise posture summary for leadership and auditorsJob TypeContractCompensation70 - $75