Senior Assurance Consultant, AWS Security Assurance Services

The AWS Security Assurance Services team is seeking a Senior Assurance Consultant to help expand the Security Assurance practice and educate our customers on how our product‑led, people‑powered services help operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved.

• Expertise – Leads teams that include Amazonians, partners, and customers to enhance security assurance and compliance programs.
• Solutions – Lead a team to define innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.
• Delivery – Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep‑dive discussions, strategic presentations/recommendations, and hands‑on demonstrations of automating compliance in the AWS environment.
• Insights – Lead efforts with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.
• Ability to travel to customer sites as needed.

• 5+ years in IT security, compliance and risk management, data privacy, or security controls.
• 3+ years experience advising customers on architectures meeting industry standards and regulations such as NIST 800‑53 and GDPR.
• 3+ years experience with enterprise risk management methods and techniques to drive successful outcomes in a global enterprise environment.
• 3+ years experience assessing security posture and producing evidence of control effectiveness in cloud environments.
• Bachelor's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience required.

• CPA, CMA, CISA, CIA or equivalent risk, audit, or compliance credentials.
• Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes.
• Clear understanding of Agile, CI/CD, Dev Ops approach and how they impact risk management and compliance.
• Technical security certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
• Demonstrated ability to think strategically about business, product, and technical challenges.
• Master's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience.