AWS Security Controls Program Manager, AWS Security Assurance

$107,400 - $229,700/Yr

Amazon - Herndon, VA

Full-time - Mid Level

Herndon, VA

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The AWS Security Controls Program Manager will play a crucial role in supporting the adoption of AWS security controls to enhance the external audit function. This position involves understanding customer and regulatory objectives, documenting security controls, and developing adoption plans while collaborating with various stakeholders to ensure compliance and improve AWS's assurance capabilities.

Responsibilities

• Understand regulatory and commercial IT requirements and serve as an adoption changemaker within the Security Assurance organization.
• Review security controls and/or security policies and standards and discuss their applicability to internal stakeholders and customers.
• Communicate to key stakeholders the operational processes around AWS security practices and how controls are implemented across the environment.
• Communicate to leadership key risks and areas of program improvement, as well as seek diverse opinions and coordinate improvement efforts.
• Field and address requests in collaboration with external auditors.
• Dive deep into the AWS control environment to develop broad domain and technical understanding of AWS control activities and implementation to articulate compliance to key stakeholders.
• Bridge communication with key stakeholders and AWS technical communities to articulate control implementation.
• Operate a quality rhythm of the business for managing multiple stakeholder expectations simultaneously.

Requirements

• Bachelor's Degree in Computer Science, Information Systems Management, Mathematics, Accounting/Auditing, or other related fields
• 7+ years of experience in security, audits, customer trust, control assessments, and/or security controls
• 5+ years of experience assessing complex technical processes

Nice-to-haves

• Experience with monitoring and automating security controls
• Experience in third-party, Government, and/or internal audit examinations
• Demonstrates high judgement and risk decision making abilities
• Experience with understanding, implementing, and/or writing IT security policies
• Experience in performing technical assessments and documentation of network, operating systems, application security, as well as auditing IT processes, including working knowledge of key controls across a number of industry best practices

Benefits

• Flexible work hours and arrangements
• Endless knowledge-sharing and training resources
• Career-advancing resources
• Work-life harmony