Global Security Assurance Analyst, Regulatory , AWS Compliance & Security Assurance
Apply NowCompany: Amazon
Location: New York, NY 10025
Description:
We are looking for a Security Industry Specialist to join our global Compliance and Security Assurance (CSA) team. Our team solves complex compliance challenges, conducts deep analysis of security requirements, and drives continuous improvement in our security assurance programs.
In this role, you will leverage your expertise in security compliance frameworks to drive and deliver security assurance across Amazon's control environment. You will work closely with cross-functional teams to implement solutions that address compliance requirements, optimize security control processes, and ensure timely delivery of regulatory commitments. As part of the team, you will own the strategy, design and operation of key mechanisms, processes and programs enabling our team to effectively track, manage and respond to our global regulatory operations at scale.
Key job responsibilities
* Leverage your knowledge of major frameworks (e.g. NIST, SOC, PCI) and the regulatory industry to track and manage new readiness initiatives with stakeholders across AmSec, Assurance, Legal, and the business. Develop and support comprehensive response strategies and control implementation workstreams.
* Evaluate and optimize existing security control mechanisms, evidence collection processes, and compliance workflows. Partner with peer teams to create scalable solutions and processes that allow us to track consistently across Assurance programs and "deliver the correct answer, more quickly."
* Own the design, development, testing, and maintenance of ongoing performance metrics, reports, analyses, dashboards, etc. to drive key business decisions. Partner across Assurance stakeholders to gather requirements and integrate necessary data sources to support business analysis and reporting across the overall Assurance function.
* Establish the mechanisms for our Exam Leads to consistently launch/track/report on exam operations within our portfolio of regulatory exams.
* Provide subject matter expertise in security compliance to engineering, program management, and business teams. Drive timely decisions around tooling and security compliance trade-offs, considering resource constraints, quality requirements, and delivery timelines
* Produce written recommendations and insights for key stakeholders to help shape programs and solutions.
* Handle multiple projects at once, deal with ambiguity and rapidly-changing priorities.
* Ad-hoc technical and delivery-related requests as required.
A day in the life
As a Security Industry Specialist, you'll need to flex knowledge of compliance frameworks, data analytics capabilities, and project management to provide end-to-end support of our exam/readiness lifecycles and reporting on risks/metrics throughout. Where our mechanisms can be improved, you'll update templates and tooling to help refine our operations. You'll also partner directly with engineering teams to define, track, and prioritize feature requests that can help improve our overall Assurance operations. Your role will serve as a cross-functional POC that will understand the needs of our regulatory assurance team and empower us to make strategic decisions/surface risk based on timely and accurate data. You will drive cross-Security readiness campaigns and partner with stakeholders across the business. You'll also partner across the Assurance organization to help drive consistency in our metrics and overall processes. Your strategic mindset will drive continual improvement of our operations and track the KPIs/KRIs that are most impactful to our team. If you excel at attention to detail, managing complex initiatives, and can effectively communicate across both technical and non-technical stakeholders, we'd love to hear from you.
About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.
Mentorship & Career Growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
BASIC QUALIFICATIONS
- 3+ years of program or project management experience
- 3+ years of working cross functionally with tech and non-tech teams experience
- 3+ years of defining and implementing process improvement initiatives using data and metrics experience
- Experience defining program requirements and using data and metrics to determine improvements
- Experience building processes, project management, and schedules
PREFERRED QUALIFICATIONS
- 3+ years of driving end to end delivery, and communicating results to senior leadership experience
- 3+ years of driving process improvements experience
- Experience with data visualization using QuickSight, Tableau, or similar tools
- Experience in stakeholder management, dealing with multiple stakeholders at varied levels of the organization
- Experience in a security environment, familiarity with security concepts (in particular data governance), and security assurance/audits
- Experience partnering across timezones and delivering as a geographically dispersed, global team
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $91,800/year in our lowest geographic market up to $196,300/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.
In this role, you will leverage your expertise in security compliance frameworks to drive and deliver security assurance across Amazon's control environment. You will work closely with cross-functional teams to implement solutions that address compliance requirements, optimize security control processes, and ensure timely delivery of regulatory commitments. As part of the team, you will own the strategy, design and operation of key mechanisms, processes and programs enabling our team to effectively track, manage and respond to our global regulatory operations at scale.
Key job responsibilities
* Leverage your knowledge of major frameworks (e.g. NIST, SOC, PCI) and the regulatory industry to track and manage new readiness initiatives with stakeholders across AmSec, Assurance, Legal, and the business. Develop and support comprehensive response strategies and control implementation workstreams.
* Evaluate and optimize existing security control mechanisms, evidence collection processes, and compliance workflows. Partner with peer teams to create scalable solutions and processes that allow us to track consistently across Assurance programs and "deliver the correct answer, more quickly."
* Own the design, development, testing, and maintenance of ongoing performance metrics, reports, analyses, dashboards, etc. to drive key business decisions. Partner across Assurance stakeholders to gather requirements and integrate necessary data sources to support business analysis and reporting across the overall Assurance function.
* Establish the mechanisms for our Exam Leads to consistently launch/track/report on exam operations within our portfolio of regulatory exams.
* Provide subject matter expertise in security compliance to engineering, program management, and business teams. Drive timely decisions around tooling and security compliance trade-offs, considering resource constraints, quality requirements, and delivery timelines
* Produce written recommendations and insights for key stakeholders to help shape programs and solutions.
* Handle multiple projects at once, deal with ambiguity and rapidly-changing priorities.
* Ad-hoc technical and delivery-related requests as required.
A day in the life
As a Security Industry Specialist, you'll need to flex knowledge of compliance frameworks, data analytics capabilities, and project management to provide end-to-end support of our exam/readiness lifecycles and reporting on risks/metrics throughout. Where our mechanisms can be improved, you'll update templates and tooling to help refine our operations. You'll also partner directly with engineering teams to define, track, and prioritize feature requests that can help improve our overall Assurance operations. Your role will serve as a cross-functional POC that will understand the needs of our regulatory assurance team and empower us to make strategic decisions/surface risk based on timely and accurate data. You will drive cross-Security readiness campaigns and partner with stakeholders across the business. You'll also partner across the Assurance organization to help drive consistency in our metrics and overall processes. Your strategic mindset will drive continual improvement of our operations and track the KPIs/KRIs that are most impactful to our team. If you excel at attention to detail, managing complex initiatives, and can effectively communicate across both technical and non-technical stakeholders, we'd love to hear from you.
About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.
Mentorship & Career Growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
BASIC QUALIFICATIONS
- 3+ years of program or project management experience
- 3+ years of working cross functionally with tech and non-tech teams experience
- 3+ years of defining and implementing process improvement initiatives using data and metrics experience
- Experience defining program requirements and using data and metrics to determine improvements
- Experience building processes, project management, and schedules
PREFERRED QUALIFICATIONS
- 3+ years of driving end to end delivery, and communicating results to senior leadership experience
- 3+ years of driving process improvements experience
- Experience with data visualization using QuickSight, Tableau, or similar tools
- Experience in stakeholder management, dealing with multiple stakeholders at varied levels of the organization
- Experience in a security environment, familiarity with security concepts (in particular data governance), and security assurance/audits
- Experience partnering across timezones and delivering as a geographically dispersed, global team
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $91,800/year in our lowest geographic market up to $196,300/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.