Security Assurance Manager

Who you are

• Successful candidates will have a strong background in security risk management and governance frameworks to protect information and physical assets
• Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying
• Bachelor's degree in Auditing, Information Systems Management, Computer Science, Cyber Security, or other related fields
• Experience driving security programs across large diverse organizations
• Strong analytical and quantitative skills with the ability to use data and metrics to back up assumptions, recommendations and drive actions
• Extensive experience of implementing large scale technology products/programs
• Leadership role in a team providing day-to-day support during the rollout/implementation of newer systems/processes
• The ability to thrive in a high-energy environment where strategic and tactical activities are expected to be driven in parallel. The ability to use both formal and informal influencing skills across cross-matrix organization. Excellent business judgment and a practical, common sense approach to getting things done

What the job involves

• AWS is looking for an exceptional Security Assurance Manager to work in a team of technical and non-technical experts
• This team manages the underlying security assurance programs processes for information security and secure information handling, physical security design and accreditation, secure hardware supply chains and AWS service assurance
• This role will have overall responsibility for the ongoing assurance and accreditation processes required by our customers for securely using AWS services and data centres, as well as managing the portfolio and roadmap of identified security updates and improvements to AWS's security baseline
• This position will have visibility at senior levels of government organisations, commercial institutions, and AWS senior leadership
• You will have the opportunity to work with Infrastructure, Networking, Application Security and AWS Service teams to build new AWS regions and sustain standards and accreditation of existing regions
• You will collaborate with a large number of internal and external stakeholders. You will assess risks, anticipate issues, help overcome technical obstacles, make difficult trade-off decisions, and balance business needs and technical constraints
• Identify and manage physical, information and insider security risks, continually reviewing mitigation strategies
• Implement and maintaining frameworks to protect information and physical assets aligning with AWS standards and customer requirements. For example, Information Security and Insider Threat Protection Frameworks
• Implement classification and handling guidelines, ensuring key stakeholders are aware of the roles and responsibilities in protecting AWS and customer information
• Ensure security best practices are implemented and are able to scale to new demands
• Triage and manage information security incidents, ensuring lessons learned are identified and used as preventative measures
• Identify high risk information, assets and systems, ensuring security controls are in place and effective
• Ensure security best practices are flowed down through the supply chain
• Where relevant, develop specific policies and/or processes where needed