GRC Cloud Security Analyst

Runs cloud security compliance audits, control evaluations and risk assessments across SHEIN's AWS and Azure environments for SHEIN Global Security in Los Angeles; the official title is Staff GRC Assurance Analyst I. The analyst gives independent, risk-based assurance over both cloud-native and in-house security controls.

The work covers planning and running audits, reviewing configurations, logs, access records and other evidence, testing whether system-generated data can be trusted, rating control gaps, writing reports, tracking remediation and risk exceptions with engineering, and moving toward automated control testing. SHEIN wants five or more years in security GRC, IT audit or technology risk with real cloud assessment experience, working knowledge of AWS and Azure security, and ISO 27001/27017, CSA CCM and CIS. Certifications such as CCSP, CISA or CRISC are preferred.