全职 Google Workspace Consultant 工作, 薪水, Skill Quotient Federal Territory 公司招聘中 - Ricebowl

1. Conduct a full audit of our current Google Workspace configuration (Admin Console settings, org units, groups, sharing settings, etc.)

2. Review and assess:

• 2-Step Verification / MFA enforcement and coverage
• Single Sign-On (SSO) / SAML configuration, if applicable
• Drive sharing settings (external sharing, link sharing defaults, domain-wide restrictions)
• Gmail security settings (SPF, DKIM, DMARC, phishing/malware protections, forwarding rules)
• Third-party app access and OAuth app whitelisting/blacklisting
• Admin roles and privilege assignment (principle of least privilege)
• Endpoint management / mobile device management (MDM) policies
• Data Loss Prevention (DLP) rules, if licensed
• Context-Aware Access and access levels
• Alert Center configuration and security alert monitoring
• Audit logging and retention settings (Vault, if applicable)
• Org unit structure and whether it supports appropriate policy segmentation
• Identify misconfigurations, excessive permissions, or risky defaults

3. Benchmark our setup against Google's security best practices and relevant compliance frameworks (e.g., CIS Benchmarks for Google Workspace)

4. Deliver a written report with prioritized findings (critical / high / medium / low) and clear remediation steps

5. Provide a walkthrough/debrief session with our team to explain findings and answer questions

6. (Optional/negotiable) Assist with implementing top-priority fixes following the review