Security Assurance Specialist, Security Assurance

Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure.

This position will be working in a team of industry-leading security experts working with UK customers to operate and continuously improve industry-leading security programmes and processes. We’re looking for an experienced and self-motivated candidate who can prioritise well and can communicate clearly and compellingly. This Security Assurance Specialist will have a background in security assurance with experience in assessing against industry standards and also maintaining processes for security compliance and assurance in programmes.

Key job responsibilities

This role works across multiple stakeholders to coordinate routine and region-expansion assurance activities, which are required to support ongoing customer adoption and business demands.

Among other duties, the Security Assurance Analyst will:

• Ensure control frameworks and compliance risks are recorded and managed
• Coordinate audits; guide control owners in documenting their own control activities and confirm readiness of controls for audit and/or certification
• Coordinate process improvements and control implementation in projects, liaising with key stakeholders and the service teams
• Track the resolution of audit findings, and the execution of projects originated from internal & external assessments
• Assist with coordinating external auditors, improve documentation, track progress, performance and improvement efforts
• AWS Region Expansion - Work across key stakeholders through the design, build and assurance of each stage of regional expansion activities.
• Changes/Updates to the Physical Environment: review and coordinate proposed changes and improvements being carried out within the assured spaces.
• Monitor and track process improvement effectiveness, and report on progress
• Produce reports on key program assurance performance metrics
• Continuously monitor processes and drive improvements in efficiency and quality of our security programmes
• Coordinate periodic programme reviews to ensure compliance with the accreditation/certification requirements in increasingly innovative ways

A day in the life

The role will be varied, one week you may be required to visit a site to coordinate security assessment activity, the other week working with SMEs to remediate security findings.

About the team

This team manages the underlying security programmes and processes for personnel security, supply chain security, physical security assurance, awareness and training, information assurance, and programme security. This position will work as part of an assurance team, leading on day-to-day programme physical assurance activities ensuring compliance with standards, processes and customer requirements.

You will need to be a UK national and able to obtain and maintain a UK Government Security Clearance. Further details found here: https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels Basic qualifications

• Experience in compliance, audit or risk management
• Minimum of 5 years’ experience in the security field.
• Degree or equivalent experience in (Computer Science, Engineering, Cyber Security, IT Security Management, Security Risk Management) a related security field.

Preferred qualifications

• Must be able to define program goals and roadmaps based on customer needs and strategic direction, and ensure that committed projects are delivered on schedule by the relevant team members.
• An entrepreneurial spirit with the ability to drive innovation independently; have a passion to improve at every opportunity.
• Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business.
• Ability to able to credibly coordinate between technical teams and business stakeholders.
• Demonstrated maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills.
• Knowledge of a variety of security programs in multiple fields (personnel security, program security, physical security, and education, awareness, and training).

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

null