Senior Cloud Security Analyst (AWS)

About the role

IQVIA is looking for a Senior Cloud Security Analyst (Analyst II) to administer and strengthen the security of enterprise cloud environments that host regulated healthcare data. The role covers managing cloud security platforms, configuring security guardrails, driving cloud governance and improving security automation and reporting, working closely with cloud, engineering, DevOps and security teams.

Key responsibilities

• Administer and maintain cloud security platforms, policies, integrations and security controls.
• Configure cloud governance guardrails, compliance controls and security policies.
• Build and maintain dashboards, reports and security metrics.
• Develop automation workflows for security findings and remediation tracking.
• Lead IAM governance reviews and identify excessive privileges or access risks.
• Prioritize and track risks, vulnerabilities and remediation activities; investigate complex incidents and escalations.
• Oversee vulnerability management and container security governance.
• Conduct security posture reviews, compliance assessments and support audit readiness and evidence collection.
• Partner with engineering and cloud teams on security controls and standards, contribute to architecture reviews and strategy, and mentor junior analysts.

Required profile

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity or a related field.
• 3-5 years of experience in cloud security, cloud engineering, security operations or a related technical role.
• Minimum 2 years of hands-on experience securing and managing AWS environments.
• Experience with cloud security platforms such as CSPM or CNAPP solutions.
• Good to have: AWS certifications, experience with Wiz, Prisma Cloud, Lacework or Defender for Cloud, exposure to Azure or GCP, and healthcare industry experience.

Required skills

• Strong knowledge of AWS security services, IAM, networking, encryption, logging and cloud security best practices.
• Cloud IAM, least-privilege access, policy analysis and privilege escalation risks.
• Vulnerability management, remediation tracking and risk prioritization.
• Hands-on scripting with Python or Bash; familiarity with Terraform or CloudFormation.
• Ability to build dashboards, metrics and reports for technical and leadership audiences.