Global Security Assurance Analyst, Amazon

• If you excel at attention to detail, managing complex initiatives, and can effectively communicate across both technical and non-technical stakeholders, we'd love to hear from you
• 3+ years of program or project management experience
• 3+ years of working cross functionally with tech and non-tech teams experience
• 3+ years of defining and implementing process improvement initiatives using data and metrics experience
• Experience defining program requirements and using data and metrics to determine improvements
• Experience building processes, project management, and schedules

Desirable

• We are looking for a Security Industry Specialist to join our global Compliance and Security Assurance (CSA) team
• Our team solves complex compliance challenges, conducts deep analysis of security requirements, and drives continuous improvement in our security assurance programs
• In this role, you will leverage your expertise in security compliance frameworks to drive and deliver security assurance across Amazon's control environment
• You will work closely with cross-functional teams to implement solutions that address compliance requirements, optimize security control processes, and ensure timely delivery of regulatory commitments
• As part of the team, you will own the strategy, design and operation of key mechanisms, processes and programs enabling our team to effectively track, manage and respond to our global regulatory operations at scale
• Leverage your knowledge of major frameworks (e.g. NIST, SOC, PCI) and the regulatory industry to track and manage new readiness initiatives with stakeholders across AmSec, Assurance, Legal, and the business
• Develop and support comprehensive response strategies and control implementation workstreams
• Evaluate and optimize existing security control mechanisms, evidence collection processes, and compliance workflows
• Partner with peer teams to create scalable solutions and processes that allow us to track consistently across Assurance programs and "deliver the correct answer, more quickly."
• Own the design, development, testing, and maintenance of ongoing performance metrics, reports, analyses, dashboards, etc. to drive key business decisions
• Partner across Assurance stakeholders to gather requirements and integrate necessary data sources to support business analysis and reporting across the overall Assurance function
• Establish the mechanisms for our Exam Leads to consistently launch/track/report on exam operations within our portfolio of regulatory exams
• Provide subject matter expertise in security compliance to engineering, program management, and business teams
• Drive timely decisions around tooling and security compliance trade-offs, considering resource constraints, quality requirements, and delivery timelines
• Produce written recommendations and insights for key stakeholders to help shape programs and solutions
• Handle multiple projects at once, deal with ambiguity and rapidly-changing priorities
• As a Security Industry Specialist, you’ll need to flex knowledge of compliance frameworks, data analytics capabilities, and project management to provide end-to-end support of our exam/readiness lifecycles and reporting on risks/metrics throughout
• Where our mechanisms can be improved, you’ll update templates and tooling to help refine our operations
• You’ll also partner directly with engineering teams to define, track, and prioritize feature requests that can help improve our overall Assurance operations
• Your role will serve as a cross-functional POC that will understand the needs of our regulatory assurance team and empower us to make strategic decisions/surface risk based on timely and accurate data
• You will drive cross-Security readiness campaigns and partner with stakeholders across the business
• You’ll also partner across the Assurance organization to help drive consistency in our metrics and overall processes
• Your strategic mindset will drive continual improvement of our operations and track the KPIs/KRIs that are most impactful to our team
• Ad-hoc technical and delivery-related requests as required