Security Governance, Risk and Assurance Manager, Security Governance, Risk and Assurance Manager

Overview

Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi‑tenant infrastructure.

AWS is looking for an exceptional Security Governance, Risk and Assurance Manager to work in a team of technical and non‑technical experts. This team manages the underlying security programs and processes for personnel security, insider risk, physical security system design and accreditations, education, awareness and training, information assurance, and program security. This position will have visibility at senior levels of government agencies, commercial institutions, and AWS senior leadership.

You will have the opportunity to work with Infrastructure, Networking, Security and AWS Service teams to build new AWS regions and sustain standards and accreditation of existing regions. You will collaborate with a large number of internal and external stakeholders. You will assess risks, anticipate issues, help overcome technical obstacles, make difficult trade‑off decisions, and balance business needs and technical constraints.

Successful candidates will have a strong background in security risk management and governance frameworks to protect information and physical assets. Candidates will be detail oriented, and have excellent problem‑solving abilities. You should be passionate about delivering great customer experiences.

• Identify and manage physical, information and insider security risks, continually reviewing mitigation strategies.
• Implement and maintaining frameworks to protect information and physical assets aligning with AWS standards and customer requirements, for example, Information Security and Insider Threat Protection Frameworks.
• Implement classification and handling guidelines, ensuring key stakeholders are aware of the roles and responsibilities in protecting AWS and customer information.
• Ensure security best practices are implemented and are able to scale to new demands.
• Triage and manage information security incidents, ensuring lessons learned are identified and used as preventative measures.
• Identify high risk information, assets and systems, ensuring security controls are in place and effective.
• Ensure security best practices are flowed down through the supply chain.
• Where relevant, develop specific policies and/or processes where needed.

As a Security Engineer, you’ll help to build and manage services that detect and automate the mitigation of cybersecurity threats across Amazon’s infrastructure. You’ll work with data scientists, software development engineers, and other security engineers across multiple teams to develop innovative security solutions. Our services protect the AWS cloud for all customers and preserve our customers’ trust in us. You’ll get to use the full power and breadth of AWS technologies to build services that proactively protect AWS customers, both internally and externally, from security threats.

You will be working in a team of industry‑leading security experts working with UK customers to operate and continuously improve industry‑leading security programs and processes. This team manages the underlying security programs and processes for personnel security, physical and logical accreditations, education, awareness and training, assurance, and cyber security.

You will need to be a UK national and able to obtain and maintain a UK Government Security Clearance. Further details found here:  Bachelor's degree in Auditing, Information Systems Management, Computer Science, Cyber Security, or other related fields

• Experience driving security programs across large diverse organizations.
• Strong analytical and quantitative skills with the ability to use data and metrics to back up assumptions, recommendations and drive actions.
• Extensive experience of implementing large scale technology products/programs.
• Leade…