Security Specialist, Security, Compliance, Privacy \u0026 Trust
Seattle, Washington
Employer: Amazon
Industry: Systems, Quality, \u0026 Security Engineering
Salary: $91800 per year
Job type: Full-Time
Are you passionate about security and access governance, monitoring and risk management? Buy with Prime and Multi-Channel Fulfillment (MCF) are looking for a highly motivated and experienced Security Governance Specialist ready to partner across Amazon tech and security groups to secure and protect our services and data. This security specialist will drive programs focused on providing multiple cross-cutting capabilities such as Access governance, Access policy management, security monitoring and detections, risk management, and continuous monitoring. You will act as a key member of the team responsible for Security Operations including Access Governance, security design, and exception activities, including automation. Candidates must have experience designing access control solution, access governance and risk management experience, including performing control self-assessments and managing external audits, designing controls, and prioritizing risk.
We operate in a hyper-growth environment where priorities shift quickly, so a passion and discipline around security and delivery is critical. You will tackle challenging situations every day and, given the size of this initiative, you will collaborate with various levels across Buy with Prime, MCF and Amazon. We are seeking a security specialist, who is comfortable working in a fast-paced, ever-changing environment and willing to dive deep into assessments and analytical rigor. Our team is growing, and we need security specialists who don't work reactively, but can operate independently, anticipate potential security challenges, and proactively monitor and improve the mechanisms we use to detect and correct potential non-compliance. The ability to partner with Service Teams and develop automated mechanisms and responses to potential instances of non-compliance will be key to scale the security program in key areas of Access Management, Risk Management, and Continuous Monitoring.
Key job responsibilities
* Design, implement and manage access control governance process and access control policies
*Analyze business, product and security data, uncover evolving threats, identify weaknesses and opportunities in risk defense
* Apply a working knowledge of information security and privacy regulation and policy to articulate customer and control impact and drive alignment to controls.
* Quantify risk control effects and trends, collaborate with engineering, operational and product teams, contribute to risk measurement, mitigation and prevention.
* Build detection rules to recognize, prevent and mitigate access violations.
* Establish regular reporting mechanisms for measuring compliance and performance;
* Develops metrics that demonstrate the current risk state, indicators of progress, and business alignment
* Support Continuous Monitoring initiatives to drive enforcement, oversight and improvement of security controls implementation through automation
* Partner with tech and security teams and to review and challenge identified risks, remediation plans, progress and status, and drive action as needed
* Monitor and oversee performance against Key Risk Indicators, including "Path to Green" plans
* Drive the successful achievement of business goals, including timely identification, escalation and remediation of risks and issues that impact program execution and delivery
About the team
Mentorship & Career Growth
Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we're building an environment that celebrates knowledge sharing and mentorship.
Work/Life Balance
Our team puts high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren't focused on how many hours you spend at work or online. Instead, we're happy to offer a flexible schedule so you can have a more productive and well-balanced life-both in and outside of work.
BASIC QUALIFICATIONS
* 5+ years of governance, risk, and monitoring experience for a large and complex organization
* Strong knowledge of security certification and compliance frameworks (e.g. ISO 27001, AICPA SOC 1/2/3, HIPAA, HiTRUST, and NIST SP 800-171 / CMMCv2) and ability to adapt and apply them- in conjunction with business requirements- as required
* Knowledge of cloud-based models (IaaS, PaaS, SaaS) and technologies used to implement controls within these environments
* Ability to communicate and manage information security concepts and requirements to personnel of varying technical backgrounds and positions * Understand and ensure compliance and risk management requirements for supported area and work with other stakeholders to implement key risk initiatives
* Functional experience across two or more information and cyber security domains (e.g., application security, identity and access management, vulnerability management, Continuous Monitoring)
PREFERRED QUALIFICATIONS
* A fast learner who can quickly absorb the nuances and behaviors of Amazon's systems architecture.
* Effective analytical skills. Proven history of analyzing data and situations to identify meaningful observations.
* Strong critical thinking skills, consistent attention to detail and ability to meet deadlines amidst competing priorities
* Strong relationship management skills to navigate the complexities of aligning stakeholders, building consensus and resolving conflicts in a large, distributed organization
* Proven ability to manage multiple and often competing priorities in a global environment; Ability to drive routines, projects and programs with a track record of successful execution / change
* Ability to decompose complex issues and drive timely decisions, knowing when to engage others for additional input or escalation; ability to synthesize information in order to drive results
* Strong communication skills (written and oral); Ability to communicate complex ideas in a clear and concise manner, including to senior business leaders and executives
* Participation in cross-functional teams and ability to work effectively in a geographically dispersed team
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $91,800/year in our lowest geographic market up to $196,300/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.
We operate in a hyper-growth environment where priorities shift quickly, so a passion and discipline around security and delivery is critical. You will tackle challenging situations every day and, given the size of this initiative, you will collaborate with various levels across Buy with Prime, MCF and Amazon. We are seeking a security specialist, who is comfortable working in a fast-paced, ever-changing environment and willing to dive deep into assessments and analytical rigor. Our team is growing, and we need security specialists who don't work reactively, but can operate independently, anticipate potential security challenges, and proactively monitor and improve the mechanisms we use to detect and correct potential non-compliance. The ability to partner with Service Teams and develop automated mechanisms and responses to potential instances of non-compliance will be key to scale the security program in key areas of Access Management, Risk Management, and Continuous Monitoring.
Key job responsibilities
* Design, implement and manage access control governance process and access control policies
*Analyze business, product and security data, uncover evolving threats, identify weaknesses and opportunities in risk defense
* Apply a working knowledge of information security and privacy regulation and policy to articulate customer and control impact and drive alignment to controls.
* Quantify risk control effects and trends, collaborate with engineering, operational and product teams, contribute to risk measurement, mitigation and prevention.
* Build detection rules to recognize, prevent and mitigate access violations.
* Establish regular reporting mechanisms for measuring compliance and performance;
* Develops metrics that demonstrate the current risk state, indicators of progress, and business alignment
* Support Continuous Monitoring initiatives to drive enforcement, oversight and improvement of security controls implementation through automation
* Partner with tech and security teams and to review and challenge identified risks, remediation plans, progress and status, and drive action as needed
* Monitor and oversee performance against Key Risk Indicators, including "Path to Green" plans
* Drive the successful achievement of business goals, including timely identification, escalation and remediation of risks and issues that impact program execution and delivery
About the team
Mentorship & Career Growth
Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we're building an environment that celebrates knowledge sharing and mentorship.
Work/Life Balance
Our team puts high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren't focused on how many hours you spend at work or online. Instead, we're happy to offer a flexible schedule so you can have a more productive and well-balanced life-both in and outside of work.
BASIC QUALIFICATIONS
* 5+ years of governance, risk, and monitoring experience for a large and complex organization
* Strong knowledge of security certification and compliance frameworks (e.g. ISO 27001, AICPA SOC 1/2/3, HIPAA, HiTRUST, and NIST SP 800-171 / CMMCv2) and ability to adapt and apply them- in conjunction with business requirements- as required
* Knowledge of cloud-based models (IaaS, PaaS, SaaS) and technologies used to implement controls within these environments
* Ability to communicate and manage information security concepts and requirements to personnel of varying technical backgrounds and positions * Understand and ensure compliance and risk management requirements for supported area and work with other stakeholders to implement key risk initiatives
* Functional experience across two or more information and cyber security domains (e.g., application security, identity and access management, vulnerability management, Continuous Monitoring)
PREFERRED QUALIFICATIONS
* A fast learner who can quickly absorb the nuances and behaviors of Amazon's systems architecture.
* Effective analytical skills. Proven history of analyzing data and situations to identify meaningful observations.
* Strong critical thinking skills, consistent attention to detail and ability to meet deadlines amidst competing priorities
* Strong relationship management skills to navigate the complexities of aligning stakeholders, building consensus and resolving conflicts in a large, distributed organization
* Proven ability to manage multiple and often competing priorities in a global environment; Ability to drive routines, projects and programs with a track record of successful execution / change
* Ability to decompose complex issues and drive timely decisions, knowing when to engage others for additional input or escalation; ability to synthesize information in order to drive results
* Strong communication skills (written and oral); Ability to communicate complex ideas in a clear and concise manner, including to senior business leaders and executives
* Participation in cross-functional teams and ability to work effectively in a geographically dispersed team
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $91,800/year in our lowest geographic market up to $196,300/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.
Created: 2024-09-29
Reference: 2789395
Country: United States
State: Washington
City: Seattle
ZIP: 98109
About Amazon
Founded in: 1994
Number of Employees: 1600000
Website: https://www.amazon.com/
Career site: https://www.amazon.jobs/en/
Instagram: https://www.instagram.com/amazon/
LinkedIn: https://www.linkedin.com/company/amazon/
Facebook: https://www.facebook.com/Amazon
Similar jobs:
-
Sr. Product Manager - Technical, Selling Partner Trust \u0026 Compliance
Amazon in Seattle, Washington💸 $136100 per year -
Sr. Program Manager, Prime Video Trust \u0026 Safety
Amazon in Seattle, Washington💸 $109000 per year -
Policy Program Manager , Devices Trust \u0026 AI Policy
Amazon in Seattle, Washington💸 $109000 per year -
Sr. Policy Program Manager , Devices Trust \u0026 AI Policy
Amazon in Seattle, Washington💸 $109000 per year -
Executive Assistant, Devices Services Trust \u0026 Security
Amazon in Seattle, Washington💸 $66800 per year -
Sr. Privacy TPM, Devices \u0026 Services Trust \u0026 Privacy (DSTP)
Amazon in Bellevue, Washington💸 $133900 per year -
Executive Assistant , Ads Creative Trust \u0026 Support, Amazon Ads
Amazon in Seattle, Washington💸 $50000 per year -
Sr. Program Manager, Prime Video Trust \u0026 Safety
Amazon in Seattle, Washington💸 $109000 per year -
Risk Manager, Trust \u0026 Safety , Buyer Safety Experience
Amazon in Seattle, Washington💸 $109000 per year -
Sr. Privacy Risk \u0026 Incident Manager, Devices \u0026 Services Trust \u0026 Privacy (DSTP)
Amazon in Seattle, Washington💸 $107400 per year