Security Assurance Specialist, Security Assurance

VulnU; Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Job summary

Amazon in London is seeking a Security Assurance Specialist to lead day-to-day security assurance activities for AWS services. You will evaluate compliance, manage evidence for critical controls, and partner with internal teams to ensure security requirements meet high customer expectations.

The role requires understanding of security frameworks, cloud architectures, and strong communication across technical and non-technical audiences. UK Government security clearance eligibility is a plus.

Qualifications

• 2+ years of experience in technical assessments or audits in cloud environments.
• Familiarity with PCI DSS, SOC 2, ISO 27001, and NIST standards.
• Strong written and verbal communication across teams and customers.

Responsibilities

• Collaborate with internal teams and customers to establish security requirements and controls.
• Manage evidence requests for key security controls with stakeholders.
• Review security of proposed AWS systems, networks, and software designs for risks.
• Liaise to articulate control implementations to customers and stakeholders.
• Develop documentation of the control environment and security activities.

Skills

Cloud security

AWS security

Data analysis

Security frameworks

Tools

AWS

Job description

Category: GRC & Compliance## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leave\"...matching, paid time off, and parental leave. Learn more about our benefit...\"Company-wide policy ·* Retirement match\"...gacy Reimbursement coverage), 401(k) matching, paid time off, and parent...\"Company-wide policy ·* Equity* Flexible PTO\"...Maternity & Parental Leave \\* Flexible PTO \\* Amazon Employee Discount -...\"Company-wide policy ·The Security Service Assurance Specialist will be part of the team which is responsible for demonstrating the security controls of services offered by AWS. This position will be focused on the Security Assurance function, leading on day-to-day security assurance activities, evaluating compliance and providing evidence of how they meet the requirements of our most security conscious customers.At AWS we are obsessed with earning and maintaining customer trust. This role facilitates our ability to build and maintain that trust through our internal Security Assurance processes and mechanisms. Ideal candidates will have the ability to learn and comprehend security control implementations and operational effectiveness, AWS services, and IT and cloud auditing processes. They will also be able to evaluate opportunities for improvement, and influence across organizations and teams.Key job responsibilitiesKey job responsibilities- Collaborate with internal teams and customers to establish baselines and agree the security requirements and associated security controls.- Manage requests for evidence relating to key security controls, by working in collaboration with internal and external stakeholders.- Responsible for reviewing the security of proposed new AWS systems, networks, and software designs for potential system security risks, and resolving integration issues related to the implementation of new services within the existing cloud infrastructure.- Liaise between key stakeholders and AWS technical communities to articulate security control implementation.- Dive deep into the Amazon control environment to develop broad domain and technical understanding of our security activities and control implementations to enable these to be articulated to both customers and internal/external stakeholders.- Work across a wide variety of AWS teams to establish and maintain information security documentation.A day in the lifeOur customer needs to work with the most secure AWS services, this role will work with AWS security teams to ensure that our services meet a high security bar before they get into customer control. This will involve performing security assessments and working with teams to support threat modelling on AWS services. Each change to a service represents a new risk, so this role will ensure changes are adequately assessed and any vulnerabilities addressed. If you have worked with security assurance or compliance in the past, this role could be a perfect fit!About the teamThis role sits within the Security Assurance Team. This team covers AWS service and physical security assurance.You will need to be a UK national and able to obtain and maintain a UK Government Security Clearance. Further details found here: https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels- Experience with AWS or cloud technologies- 2+ years of professional experience in performing technical assessments or audits within a cloud environment, including working knowledge of foundational security principles and industry best practices.- Proven analytical and quantitative skills, and an ability to use data and metrics to back up assumptions, develop detailed reporting and drive process improvements.- Experience with compliance & security standards including PCI DSS, SOC 2, ISO 27001, and NIST- Solid foundation in service-oriented and web-service technologies.- Experience designing and implementing systems using AWS. Familiarity with Information Security or Audit frameworks. Experience in the delivery of projects and programs across multiple teams.- Strong verbal and written communications skills, as well as the ability to work effectively across internal and external organizations. Strong analytical and critical thinking skills with the ability to use data to back up assumptions, recommendations and drive actions.Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy\\_page) to know more about how we collect, use and transfer the personal data of our candidates.Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.-Curated listing: aggregated from Amazon's public careers page. Apply directly via the link - Amazon has not paid for placement.Pin it to the top of the board and the VulnU newsletter for 30 days.Share:# Security Assurance Specialist, Security Assurance·Location: London, England, GBR\"...include sign-on payments and restricted stock units (RSUs). Final compensation wi...\"Company-wide policy ·