Assurance Solutions Architect, AWS Security Assurance Services

Overview

AWS includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center.

You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud.

The Security Assurance Services team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar‑raising security outcomes and investment in security mechanisms and automation on behalf of our customers.

The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. The role is for a Governance, Risk, and Compliance leader who can address challenges of migrating systems and workloads to the cloud, helping executives meet enterprise risk management requirements using scalable computing architectures.

As an Assurance Consultant, you will help expand the Security Assurance practice and educate customers on how our product‑led, people‑powered services operate securely on AWS while achieving compliance objectives. You’ll contribute at the intersection of cloud, cyber security, and compliance, working across lines of business and learning from a variety of security and compliance use cases.

• Expertise – Deliver in teams that include Amazonians, partners, and customers to enhance security assurance and compliance programs.
• Solutions – Work with a team to define innovative compliance and risk management approaches to customers that help them understand how to move sensitive workloads onto the cloud faster.
• Delivery – Resolve security assurance questions and understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep‑dive discussions, strategic presentations/recommendations, and hands‑on demonstrations of automating compliance in the AWS environment.
• Insights – Work with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.
• Travel – Ability to travel to customer sites as needed.

AWS Security Assurance Services LLC, a PCI‑QSAC (Payment Card Industry‑Qualified Security Assessor) and HITRUST External Assessor Firm, is a team of industry certified assessors helping our customers achieve, maintain, and automate compliance in the cloud by tying together applicable audit standards to AWS service‑specific features and functionality.

• 2+ years of design, implementation, or consulting in applications and infrastructures experience.
• 4+ years of specific technology domain experience (e.g., software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics).
• Knowledge of primary AWS services (EC2, ELB, RDS, Route 53, & S3).
• 4+ years of external or internal customer‑facing, complex and large‑scale project management experience.
• 4+ years experience assessing the security posture and producing evidence of control effectiveness in cloud environments.
• 4+ years’ experience advising customers on architectures meeting NIST‑based industry standards such as NIST 800‑53, FedRAMP, NIST 800‑171, and CMMC.

• Experience leading the design, development and deployment of business software at scale or recent hands‑on technology infrastructure, network, compute, storage, and virtualization experience.
• Experience performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT…