AWS Customer Assurance Program Manager, AWS Security Assurance

Do you have a passion for applying cutting edge technologies and automation in traditionally manual processes? Do you have experience in finding innovative solutions to scale security controls across diverse teams and technologies?

Do you have ideas about influencing the future of how AWS delivers assurance for its customers? At Amazon Web Services (AWS), Security is our highest priority.

Come, join a creative team at Security Assurance dedicated to engaging with our most regulatory and security conscious customers.

We solve customers’ most challenging regulatory compliance, audit, and risk management requirements to provide customers with the confidence to operate their most sensitive workloads securely on AWS.

We are looking for an independent, passionate, and deeply experienced leader with experience and expertise in developing and implementing compliance and assurance programs in global environments.

You will join our team in helping customers understand how our infrastructure is designed, operated, maintained, and protected in accordance with global regulated industry standards.

You will engage AWS customers to rationalize and satisfy their audit, compliance, and risk requirements specific to AWS.

A successful candidate will have deep knowledge of regulatory compliance, audit, and risk management principles. We are looking for an experienced industry professional who understands complex IT and compliance processes, and evaluates opportunities for improvement.

The successful candidate is one who loves working across many stakeholders, including internal and external customers, to design solutions for compliance challenges.

You are passionate about the security of the cloud and you want to solve real business problems. You are a technically experienced and innovative security, compliance, and audit professional who has the ability to understand IT processes, communicate clearly and transparently with customers, and to be able to drive innovative process changes through multiple organizations and teams.

You will be a positive influencer across diverse teams, be able to effectively rally support for your initiatives and be able to collaborate with others to drive simple, scalable solutions to meet customer and regulator expectations.

You will have an opportunity to work directly with senior leadership within AWS to improve AWS’ ability to demonstrate assurance for regulated customers.

Key job responsibilities

In this role, you will be responsible for the following activities :

• Dive deep into the AWS control environment to develop broad domain and technical understanding of AWS security activities and control implementations to articulate compliance implications to both customers and internal / external audit functions.
• Develop understanding of regulated industry compliance requirements and communicate how AWS control activities meet customer obligations.
• Simplify and decompose security compliance requirements into clear technical control specifications and policies.
• Field and address requests for team support in collaboration with internal and external stakeholders.
• Liaise with customers, regulators and auditors, articulate control implementation, and describe considerations for applying security and compliance concepts to a technical cloud environment.
• Apply a working knowledge of global information security regulation and policy to articulate customer and control impact and drive alignment to AWS controls.
• Implement mechanisms to address recurring escalation patterns and persistent challenges.
• Identify deep, actionable insights of our global assurance capabilities to enhance the program, with an emphasis on efficiency and scale.

About the team

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply.

If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services.

We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness.

Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work / Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture.

When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

We are open to hiring candidates to work out of one of the following locations :

Arlington, VA, USA Herndon, VA, USA New York, NY, USA Seattle, WA, USA

BASIC QUALIFICATIONS

• 4+ years of experience in program or project management in technical environments.
• 4+ years of experience in either risk management, audit, or compliance in regulated industries or a provider of services to regulated industries.
• 1 or more industry-recognized security, cloud, or audit professional certifications (e.g., CISA, CISM, CISSP, CCSP, AWS Cloud Security Practitioner)

PREFERRED QUALIFICATIONS

• Bachelors, Masters or Diploma in Computer Science, Information Systems Management, Auditing, Cybersecurity or other related fields.
• Experience in technical security design, compliance consulting, or advisory work in support of a highly technical environment.
• Experience working with technical compliance frameworks / programs, such as NIST, ISO, PCI, GDPR.
• Experience working with third and fourth party risk management programs.
• Experience managing, performing, and / or overseeing IT self-assessments or audits, and the respective gap remediation.
• Experience responding to, and driving action from, regulatory findings.
5 days ago