Amazon

DESCRIPTION

AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud.

AWS Global Security Services is looking for a Sr. Manager, Security Engineering to lead our Global Regulated Information Privacy & Production Program (GRIPP). Customers ask AWS to help deliver, migrate, and innovate on their most important workloads, and that can mean helping with workloads that process regulated data or working in the customer’s production environment. The GRIPP team manages automation, processes, and policies that maintain AWS’s security bar in every high-risk customer interaction.

As a Security Leader, you will own building and managing a global team of security professionals while fostering a strong team culture. You should know how to prioritize, communicate clearly and compellingly, and understand how to drive a high level of focus and excellence with a strong team. You will set the security strategy and priorities for the GRIPP team inside SMGS Engagement Security. You will lead a distributed team of cross-functional security professionals (such as security engineers, technical project managers, and program managers) who ensure that, when customers ask AWS to work on their data and systems, we keep the customer safe, we obey relevant regulations and policies, and we meet AWS’s high expectations for secure delivery.

You will also advise executive leadership by recommending information security investments which mitigate risks, strengthen defenses, and reduce vulnerabilities for business activities and operations across Sales, Marketing and Global Services (SMGS). You will collaborate with customer-facing business stakeholders, legal, human resources, compliance and privacy specialists, in addition to AWS Security, to define information security requirements, specify risk mitigation workflows and engage the appropriate stakeholders to maintain operational and reputational integrity.

The ideal candidate will have significant experience in information security management and leadership.

The ideal candidate will have experience with

• Best practices in information security around access control, authentication, identity management and incident response
• Security tooling such as telemetry (logging, alerting, monitoring), drift detection, anomaly detection
• Turning high-level policy goals into repeatable actions and measurable outcomes
• Collaborating with legal and compliance authorities within AWS to understand the impact of laws and regulations to inform technical and process work products and solutions.

Key job responsibilities

• Driving security initiative planning, outcomes and improvements: Participate in wider leadership across the extended SMGS EngSec functions. Establish roadmap/strategic direction for our business generally and the team specifically
• Recruiting, team management and growth: Build, lead, and develop a high-performing security team with the right mix of skills. Assess performance and manage both high and low performers
• Processional development of team members: Define team goals, provide coaching, and foster a culture of innovation and collaboration. Hire, develop, and promote technical and non-technical team members
• Security guidance documentation, training and reviews: Assess security risks, establish mitigation strategies, and develop technical roadmaps. Partner with SMGS builder teams to understand requirements and integrate security seamlessly into their work with AWS customers
• Security Escalations: Independently make short-term vs. long-term risk decisions, escalating as required. Act as a point of escalation for high-judgement decisions on information security risk, incorporating advice from teams like AWS Legal, AWS Security, and executive leadership as required
• Metrics, projections and inspections: Implement success metrics, reporting, and processes that measure program outcomes and effectiveness

A day in the life

As Sr. Manager, Security Engineering leading our GRIPP team, you will often find yourself:

• Owning and driving large-scale programs and campaigns for awareness of policy or adoption of new mechanisms
• Using automation to scale our mechanisms across the business and minimize friction around security controls
• Owning security escalation action items and informing Senior Leadership on short/medium and long-term recommendations to triage escalations and mitigate risks
• Conversing with builder teams about security, risk, and regulatory requirements
• Diving deep into the control landscape and operations AWS services and features with our builder teams
• Collaborating with our Assurance, Legal, and partner Security teams
• Bar raising our deliverables and mentoring more junior team members and builders.

About the team

About AWS

Diverse Experiences

AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why AWS?

Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Inclusive Team Culture

AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

Mentorship & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

BASIC QUALIFICATIONS

• 10+ years of information security management
• Experience evaluating, recommending and implementing new and emerging security technologies such as AI, machine learning, and data science
• Experience managing/working with teams who use AWS

PREFERRED QUALIFICATIONS

• • Experience working with regulatory frameworks, industry standards or laws, such as: ISO 27001, PCI DSS, HIPAA, GDPR
• • Experience with software development in large enterprise environments
• • Experience leveraging AI or machine learning to automate security at scale
• • Certifications or similar: AWS Certified Cloud Practitioner or equivalent experience, AWS Certified Security Specialist, Global cybersecurity certifications

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $187,500/year in our lowest geographic market up to $324,100/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.