Senior Security Assurance Lead, Security Assurance

Amazon.com, Inc; Beer; On-site; GBP 90,000 - 130,000; Full time

Job summary

Amazon Web Services (AWS) seeks a Senior Security Assurance Lead in the United Kingdom to drive service assurance, demonstrate security controls, and coordinate evidence for AWS services. You will guide internal teams and customers, assess designs for compliance, and help strengthen security across cloud environments.

UK national status and ability to obtain government clearance are required, with familiarity in ISO/SOC/HITRUST frameworks and cloud auditing practices.

Qualifications

• Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or related field, or equivalent tech experience.
• Experience performing and/or participating in technical assessments in support of major compliance efforts (ISO 27001, ISO 22301, PCI, SOC1/SOC2, HITRUST).

Responsibilities

• Collaborate with internal teams and customers to establish baselines and security controls.
• Manage requests for evidence relating to key security controls with internal and external stakeholders.
• Review security of proposed AWS systems, networks, and software designs for risks and resolve integration issues.
• Liaise between stakeholders and AWS technical communities to articulate control implementations.
• Develop understanding of the control environment to communicate with customers and stakeholders.
• Work across AWS teams to maintain information security documentation.

Skills

Security assurance

Cloud security

Security auditing

Stakeholder communication

Education

Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or related

Job description

At Amazon Web Services (AWS), Security is our highest priority. At AWS' scale, we invent new ways to provide the highest level of assurance to our security conscious customers. AWS Security is looking for a Senior Security Assurance Lead who can prioritize well, communicate early and clearly, and has a solid understanding of security and compliance within a cloud environment. The Senior Security Assurance Lead will lead AWS Service Assurance activity and be part of the team which is responsible for demonstrating the security controls of services offered by AWS to our customer. This position will be focused on the Service Assurance function, leading on day-to-day security assurance activities, evaluating compliance and providing evidence of how they meet the requirements of our most security conscious customers, whilst developing strategies and mechanisms for how these processes can be completed as seamlessly and effectively as possible. At AWS we are obsessed with earning and maintaining customer trust. This role facilitates our ability to build and maintain that trust through our internal Security Assurance processes and mechanisms. Ideal candidates will have the ability to learn and comprehend security control implementations and operational effectiveness, AWS services, and IT and cloud auditing processes. They will also be able to evaluate opportunities for improvement, and influence across organizations and teams. You will be expected to review existing processes and think big to establish long-term strategic mechanisms.

Key job responsibilities

• Collaborate with internal teams and customers to establish baselines and agree the security requirements and associated security controls.
• Manage requests for evidence relating to key security controls, by working in collaboration with internal and external stakeholders.
• Responsible for reviewing the security of proposed new AWS systems, networks, and software designs for potential system security risks, and resolving integration issues related to the implementation of new services within the existing cloud infrastructure.
• Liaise between key stakeholders and AWS technical communities to articulate security control implementation.
• Dive deep into the Amazon control environment to develop broad domain and technical understanding of our security activities and control implementations to enable these to be articulated to both customers and internal/external stakeholders.
• Work across a wide variety of AWS teams to establish and maintain information security documentation.

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

Training & Career Growth

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.

About the team

You will need to be a UK national and able to obtain and maintain a UK Government Security Clearance. Further details found here: https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels

Qualifications

Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience, Experience performing and/or participating in technical assessments in direct support of a major compliance effort (e.g. ISO 27001, ISO 22301, ISO 27701, ISO 9001, PCI, SOC1/SOC 2, HITRUST)

Amazon Web Services is a dynamic and rapidly growing business within Amazon.com. We provide a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands of businesses in 190 countries around the world. We provide organisations with building block web services that allow them to innovate faster and operate their software more cost-effectively. These services-in-the-cloud include on-demand compute capacity, storage, content delivery, querying of structured data, message queuing, and more. The AWS team is building and delivering the next generation of cloud computing that supports public AWS offerings like S3, EC2, and CloudFront. We are innovating new ways of building massively scalable distributed systems.

Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon's culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build.

Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates.