Cloud Security Analyst

About the role

IQVIA is looking for a Cloud Security Analyst to support the security and compliance of cloud environments hosting regulated healthcare data. You will monitor cloud security posture, investigate security findings, support identity and access reviews and work with engineering teams to remediate risks. It suits an early-career security professional wanting hands-on experience in AWS cloud security, security operations, compliance and cloud governance.

Key responsibilities

• Monitor, review and triage cloud security findings across AWS environments
• Investigate security alerts and posture issues, escalating when needed
• Support security posture reviews against established standards and best practices
• Assist with AWS IAM reviews and identify excessive permissions or access risks
• Track vulnerabilities and remediation activities, and review container image vulnerabilities
• Validate encryption controls and security configurations
• Collect and maintain security evidence for audits and compliance
• Maintain security documentation, procedures and remediation records
• Collaborate with cloud, infrastructure and engineering teams to improve security posture

Required profile

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity or a related field
• 1-3 years of experience in cloud operations, security operations, systems administration or a related technical role
• Experience investigating and resolving security findings or operational issues
• Good written and verbal communication skills in English

Required skills

• Familiarity with AWS services including IAM, EC2, S3, VPC, CloudTrail and logging services
• Understanding of cloud security principles such as least privilege, encryption, vulnerability management and network security
• Knowledge of cloud configuration and security best practices
• Exposure to cloud security, monitoring or posture management tools
• Strong analytical, troubleshooting and problem-solving skills

Good to have: AWS certifications (Cloud Practitioner, Solutions Architect Associate, CompTIA Security+), CNAPP/CSPM or cloud security platform experience, Python or Bash scripting, Terraform or CloudFormation, Jira or ServiceNow, Microsoft Azure or GCP, and familiarity with CIS Benchmarks, NIST, SOC 2, HITRUST or regulated environments.