Canada Security Assurance Lead, AWS Compliance & Security Assurance

Amazon; Ottawa; On-site; CAD 100,000 - 130,000; Full time

Job summary

A global leader in technology seeks a Security Assurance Specialist in Ottawa, Canada. The role involves strategic regulatory engagement, compliance assessments, and ensuring security across AWS services. Candidates must have a Bachelor's degree in a related field and significant experience in government interactions and security frameworks. This position offers the opportunity to enhance security assurance in cloud services and support various regulatory needs while working in a diverse and inclusive team environment.

Benefits

Flexible work hours

Training and career growth resources

Diversity and inclusion initiatives

Qualifications

• Minimum 6 years working with government officials and regulatory bodies.
• Over 5 years experience in security related fields including cloud, AI, and incident response.
• Solid design program management experience.

Responsibilities

• Serve as regulatory security expert for AWS and customers.
• Work with public policy to analyze initiatives for laws and regulations.
• Develop long-term regulatory projects and initiatives for AWS.

Skills

Cloud security

Regulatory compliance

Incident response

Penetration testing

Threat intelligence

Application security frameworks

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Job description

AWS is seeking a Security Assurance Specialist who will drive the strategy that enables every customer, in every sector of Canada. This position is based in Ottawa, ON and will require travel to cover special projects.

If you have a deep understanding of security, privacy and resilience and you are passionate about building and sustaining trust with our customers, then this role is for you.

You will think big and have long‑term strategic thinking, accountable for security assurance of AWS services in your region, but you will sustain a bias for action and attention to detail that drives continuous rapid improvement. You will have a desire to learn and understand the complexities of legal, regulatory and compliance requirements across all sectors of your region. You will be interested in understanding regulatory complexities and compliance requirements and translate to teams in engineering, operations, audit, public policy, legal and sales.

You recognize that success and value in security is measured by the pace of innovation and the safe management of risk. You will aspire to change the experience of security assurance to be more valuable and frictionless for all of our customers.

You will be comfortable supporting engagements with regulators and customer auditors, architects, security officers, lawyers and policy‑makers. You will be proficient in understanding the diverse needs of regulators and government assurance agencies. You will put the customer first, working at the center of an extended team of specialists, program managers and engineers who are together working to earn and sustain the trust of our customers.

You will have a good understanding of cloud technologies, experience in security assurance and demonstrated success in driving innovative strategies to overcome obstacles.

If you are ready to bring all your experience, energy, and talent to transform how security assurance in the cloud is experienced by our customers in the region, then we would like to hear from you.

Key job responsibilities

• Serve as regulatory security expert to AWS, customers, auditors, and regulators on regional and domestic regulations on outsourcing, cybersecurity, and operational resilience.
• Work with public policy to analyse initiatives for laws and regulations for potential impact on AWS and our customers and develop appropriate mitigation and implementation approaches.
• Develop and execute long‑term regulatory projects and initiatives, which may have broad scope and complexity, for AWS and AWS customers.
• Identify potential regulatory trends in the region.
• Create, optimise, and support cross‑functional groups and projects.
• Develop thought leadership material on cloud and emerging technologies for regulators and internal customers.
• Manage tight deadlines and drive for results, while being extremely detail‑orientated.

A day in the life

On a daily basis you will:

• Work with extended teams when interacting with regulatory bodies.
• Analyse and perform compliance impact assessments.
• Deliver presentations to regulatory bodies and customers.

About the team

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge‑sharing, training, and other career‑advancing resources here to help you develop into a better‑rounded professional.

Work/Life Balance

We value work‑life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Qualifications

• Bachelor’s degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline.
• 6+ years of working directly with government officials and regulatory bodies experience.
• 5+ years of any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing experience.
• 6+ years of design program management experience.
• Experience communicating to senior management and customers verbally and in writing.
• Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development.
• Experience with IT compliance and risk management requirements (e.g. security, privacy, SOX, HIPAA etc.).
• Experience working with sensitive or classified systems of government.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.