Cloud Security and Access Management Architect - 100% Remote - 2-3 Months Contract

Job Details:

Job Title:             Cloud Security and Access Management Architect

Location:             100% Remote

Duration:            2 Months Contract

Description:

Need to will review the Cloud Security Architecture Risk Assessment findings, supporting source documents, current Cameco standards, and existing operational procedures to develop clear, practical documentation that addresses identified gaps in:

• Cloud security governance
• Identity resilience
• Access management
• Data protection
• Logging and monitoring
• Incident response preparedness

The engagement will include the creation or enhancement of corporate standards, supporting guidance, process documentation, and templates to establish consistent expectations across cloud platforms. All documentation must be risk-based, operationally practical, aligned with Cameco’s governance model, and suitable as evidence supporting completion of management action plans.

Key activities include:

• Conducting a risk assessment and developing mitigation strategies to reduce reliance on a single identity provider and support continuity of access during service disruptions.
• Updating or developing cloud access governance standards covering provisioning, deprovisioning, privileged access management, approvals, evidence requirements, and oversight across all access request channels.
• Creating a cloud data protection standard and supporting reference materials that define accountabilities, required controls, approved exceptions, and documentation expectations.
• Developing cloud security logging and monitoring standards that establish minimum requirements for logging, retention, review, monitoring, and investigations based on Cameco’s risk, compliance, and operational needs.
• Developing cloud incident response and recovery playbooks for priority scenarios, including roles and responsibilities, escalation paths, provider handoffs, recovery assumptions, and review cycles.

Deliverables:

• Draft documentation for review and stakeholder consultation.
• Incorporation of stakeholder feedback and preparation of final standards and procedures using Cameco templates.
• A cross-reference matrix mapping each deliverable to audit observations and source-document recommendations.

Acceptance Criteria - work will be considered complete when Cameco confirms that the documentation:

• Addresses the applicable findings and recommendations.
• Aligns with approved corporate standard formats.
• Clearly identifies ownership and review cycles.
• Is practical for operational use.
• Provides sufficient traceability to support Internal Audit closure evidence.