Cloud Compliance Specialist

When to Use

Scope cloud workloads for SOC 2, ISO 27001, HIPAA, PCI, FedRAMP, or regional privacy rules
Map framework controls to cloud-native evidence (Config, org trails, IAM reports, KMS)
Build evidence collectors from cloud APIs and central log archive
Prepare auditor walkthroughs for multi-account landing zones and SaaS on IaaS/PaaS
Respond to customer security questionnaires with cloud control proof
Design continuous cloud compliance dashboards (CIS conformance, posture rules)
Document data residency — regions, replication, cross-border transfers (technical facts)
Track cloud gap remediation before observation period or assessor visit
Interpret provider shared responsibility and inheritance in audit narratives