Security Assurance Specialist, Security Assurance

Amazon.com, Inc; City of Westminster; Vor Ort; GBP 70.000 - 100.000; Vollzeit

Zusammenfassung

Amazon.com, Inc in the United Kingdom seeks a Security Assurance Analyst to coordinate audits, manage control activities, and support region expansion with robust security governance. You will work across stakeholders, drive improvements, and ensure compliance with industry standards.

The role requires at least 5 years in security and a relevant degree; strong communication and leadership are essential. The team oversees personnel, supply chain, physical security, awareness and training, and

Qualifikationen

• 5+ years of experience in the security field.
• Degree or equivalent in a related security field (CS/Engineering/Cyber Security).
• Ability to define program goals and roadmaps based on customer needs.
• Strong written and oral communication for leadership and technical teams.

Aufgaben

• Coordinate audits; guide control owners in documenting their activities and confirm readiness.
• Track resolution of audit findings and progress of improvement projects.
• Coordinate process improvements and control implementation with stakeholders and service teams.
• Assist with coordinating external auditors and improve documentation.
• Monitor and report on key assurance performance metrics.

Kenntnisse

Compliance & risk management

Audit coordination

Security program management

Stakeholder communication

Ausbildung

Degree in CS/Engineering/Cyber Security

Jobbeschreibung

This role works across multiple stakeholders to coordinate routine and region-expansion assurance activities, which are required to support ongoing customer adoption and business demands. Among other duties, the Security Assurance Analyst will:

• Ensure control frameworks and compliance risks are recorded and managed
• Coordinate audits; guide control owners in documenting their own control activities and confirm readiness of controls for audit and/or certification
• Coordinate process improvements and control implementation in projects, liaising with key stakeholders and the service teams
• Track the resolution of audit findings, and the execution of projects originated from internal & external assessments
• Assist with coordinating external auditors, improve documentation, track progress, performance and improvement efforts
• AWS Region Expansion - Work across key stakeholders through the design, build and assurance of each stage of regional expansion activities.
• Changes/Updates to the Physical Environment: review and coordinate proposed changes and improvements being carried out within the assured spaces.
• Monitor and track process improvement effectiveness, and report on progress
• Produce reports on key program assurance performance metrics
• Continuously monitor processes and drive improvements in efficiency and quality of our security programmes
• Coordinate periodic programme reviews to ensure compliance with the accreditation/certification requirements in increasingly innovative ways

A day in the life The role will be varied, one week you may be required to visit a site to coordinate security assessment activity, the other week working with SMEs to remediate security findings.

About the team This team manages the underlying security programmes and processes for personnel security, supply chain security, physical security assurance, awareness and training, information assurance, and programme security. This position will work as part of an assurance team, leading on day-to-day programme physical assurance activities ensuring compliance with standards, processes and customer requirements.

This position will be working in a team of industry-leading security experts working with UK customers to operate and continuously improve industry-leading security programmes and processes. We're looking for an experienced and self-motivated candidate who can prioritise well and can communicate clearly and compellingly. This Security Assurance Specialist will have a background in security assurance with experience in assessing against industry standards and also maintaining processes for security compliance and assurance in programmes.

• Experience in compliance, audit or risk management
• Minimum of 5 years' experience in the security field.
• Degree or equivalent experience in (Computer Science, Engineering, Cyber Security, IT Security Management, Security Risk Management) a related security field., Must be able to define program goals and roadmaps based on customer needs and strategic direction, and ensure that committed projects are delivered on schedule by the relevant team members.
• An entrepreneurial spirit with the ability to drive innovation independently; have a passion to improve at every opportunity.
• Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business.
• Ability to able to credibly coordinate between technical teams and business stakeholders.
• Demonstrated maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills.
• Knowledge of a variety of security programs in multiple fields (personnel security, program security, physical security, and education, awareness, and training).
  Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS's multi-tenant infrastructure., Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates.