Security Governance, Risk and Assurance Manager, Security Governance, Risk and Assurance Manager

Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start‑ups to enterprises, run their operations and applications on AWS's multi‑tenant infrastructure.

AWS is looking for an exceptional Security Governance, Risk and Assurance Manager to work in a team of technical and non‑technical experts. This team manages the underlying security programs and processes for personnel security, insider risk, physical security system design and accreditations, education, awareness and training, information assurance, and program security. This position will have visibility at senior levels of government agencies, commercial institutions, and AWS senior leadership.

You will have the opportunity to work with Infrastructure, Networking, Security and AWS Service teams to build new AWS regions and sustain standards and accreditation of existing regions. You will collaborate with a large number of internal and external stakeholders. You will assess risks, anticipate issues, help overcome technical obstacles, make difficult trade‑off decisions, and balance business needs and technical constraints.

Successful candidates will have a strong background in security risk management and governance frameworks to protect information and physical assets. Candidates will be detail oriented, and have excellent problem‑solving abilities. You should be passionate about delivering great customer experiences.

• Identify and manage physical, information and insider security risks, continually reviewing mitigation strategies.
• Implement and maintain frameworks to protect information and physical assets aligning with AWS standards and customer requirements. For example, Information Security and Insider Threat Protection Frameworks.
• Implement classification and handling guidelines, ensuring key stakeholders are aware of the roles and responsibilities in protecting AWS and customer information.
• Ensure security best practices are implemented and are able to scale to new demands.
• Triage and manage information security incidents, ensuring lessons learned are identified and used as preventative measures.
• Identify high risk information, assets and systems, ensuring security controls are in place and effective.
• Ensure security best practices are flowed down through the supply chain.
• Where relevant, develop specific policies and/or processes where needed.

About Amazon Security

Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

AWS values curiosity and connection. Our employee‑led and company‑sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge‑sharing, training, and other career‑advancing resources here to help you develop into a better‑rounded professional.

We value work‑life…