Security Assurance Specialist, Security Assurance

The Security Service Assurance Specialist will be part of the team which is responsible for demonstrating the security controls of services offered by AWS. This position will be focused on the Security Assurance function, leading on day-to-day security assurance activities, evaluating compliance and providing evidence of how they meet the requirements of our most security conscious customers. At AWS we are obsessed with earning and maintaining customer trust. This role facilitates our ability to build and maintain that trust through our internal Security Assurance processes and mechanisms. Ideal candidates will have the ability to learn and comprehend security control implementations and operational effectiveness, AWS services, and IT and cloud auditing processes. They will also be able to evaluate opportunities for improvement, and influence across organizations and teams. Key job responsibilities Key job responsibilities • Collaborate with internal teams and customers to establish baselines and agree the security requirements and associated security controls. • Manage requests for evidence relating to key security controls, by working in collaboration with internal and external stakeholders. • Responsible for reviewing the security of proposed new AWS systems, networks, and software designs for potential system security risks, and resolving integration issues related to the implementation of new services within the existing cloud infrastructure. • Liaise between key stakeholders and AWS technical communities to articulate security control implementation. • Dive deep into the Amazon control environment to develop broad domain and technical understanding of our security activities and control implementations to enable these to be articulated to both customers and internal/external stakeholders. • Work across a wide variety of AWS teams to establish and maintain information security documentation. A day in the life Our customer needs to work with the most secure AWS services, this role will work with AWS security teams to ensure that our services meet a high security bar before they get into customer control. This will involve performing security assessments and working with teams to support threat modelling on AWS services. Each change to a service represents a new risk, so this role will ensure changes are adequately assessed and any vulnerabilities addressed. If you have worked with security assurance or compliance in the past, this role could be a perfect fit! About the team This role sits within the Security Assurance Team. This team covers AWS service and physical security assurance. You will need to be a UK national and able to obtain and maintain a UK Government Security Clearance. Further details found here: https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels