Senior Assurance Consultant, AWS Security Assurance Services

The Security Assurance Services (SAS) team a part of Amazon Web Services leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the worlds workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.
The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Governance Risk and Compliance leader who can address the challenges of migrating systems and workloads to the cloud Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures
The AWS Security Assurance Service team is seeking a talented Senior Assurance Consultant to help the expansion of the Security Assurance practice and educate our customers on how our product-led people-powered services helps operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud cyber security and compliance. You will have the opportunity to work with multiple lines of business and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by helping enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk regulatory and compliance requirements.
We are looking for an innovative security/compliance professional who has the ability to handle a wide range of compliance requirements is willing to dive in to the details can translate those requirements into scalable solutions and is able to communicate at all levels within an organization.

Key job responsibilities
Expertise Leads teams that include Amazonians partners and customers to enhance security assurance and compliance programs

Solutions - Lead a team to define innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.

Delivery Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions strategic presentations/recommendations and hands on demonstrations of automating compliance in the AWS environment.

Insights - Lead efforts with AWS engineering support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.

Ability to travel to customer sites as needed.

About the team
AWS Security Assurance Services LLC a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm is a team of industry certified assessors helping our customers achieve maintain and automate compliance in the cloud by tying together applicable audit standards to AWS service specific features and functionality.

Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description we encourage candidates to apply. If your career is just starting hasnt followed a traditional path or includes alternative experiences dont let it stop you from applying.

Why AWS
Amazon Web Services (AWS) is the worlds most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating thats why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home theres nothing we cant achieve in the cloud.

Inclusive Team Culture
Here at AWS its in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences inspire us to never stop embracing our uniqueness.

Mentorship and Career Growth
Were continuously raising our performance bar as we strive to become Earths Best Employer. Thats why youll find endless knowledge-sharing mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Hybrid Work
We value innovation and recognize this sometimes requires uninterrupted time to focus on a build. We also value in-person collaboration and time spent face-to-face. Our team affords employees options to work in the office every day or in a flexible hybrid work model near one of our Amazon offices.

- 5 years in IT security compliance and risk management data privacy or security controls.
- 3 years experience advising customers on architectures meeting industry standards and regulations such as NIST 800-53 and GDPR.
- 3 years experience with enterprise risk management methods and techniques to drive successful outcomes in a global enterprise environment.
- 3 years experience assessing security posture and producing evidence of control effectiveness in cloud environments.
- Bachelors Degree in Computer Science Information Systems Management Information Security or equivalent experience required.

- CPA CMA CISA CIA or equivalent risk audit or compliance credentials
- Experience in performing security assessments and information system audits of network operating systems application security as well as auditing IT processes.
- Clear understanding of Agile CI/CD DevOps approach and how they impact risk management and compliance.
- Technical security certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
- Demonstrated ability to think strategically about business product and technical challenges.
- Masters Degree in Computer Science Information Systems Management Information Security or equivalent experience.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.