Senior Security Assurance Solution Architect, AWS Security Assurance Services

About the role

The AWS Security Assurance Services team works with its largest enterprise customers to help them operationalize the shared responsibility model as they migrate to the cloud. It is seeking a Senior Security Assurance Solution Architect to expand the Security Assurance practice, educate customers on how its people-powered services help run their business securely on AWS, and demonstrate that compliance objectives can be met. This is a customer-facing role measuring success by helping customers move workloads and regulated data into the cloud while addressing risk, regulatory and compliance requirements.

Key responsibilities

• Lead teams of Amazonians, partners and customers to strengthen security assurance and compliance programs.
• Define innovative compliance and risk management approaches that help customers move sensitive workloads to the cloud faster.
• Resolve security assurance questions through deep-dive discussions, strategic presentations and recommendations, and hands-on demonstrations of automating compliance in the AWS environment.
• Work with AWS engineering support and business teams to feed partner and customer feedback into AWS technology roadmaps.
• Travel to customer sites as needed.

Required profile

• Bachelor's degree or equivalent in Computer Science, Engineering, Information Systems Management, Information Security or a related field; a Master's degree is preferred.
• 3+ years advising customers on architectures that meet industry standards and regulations such as NIST 800-53 and GDPR.
• Experience in risk management and internal audit, including risk assessments, audits, control design and enterprise control frameworks.
• Experience securing cloud software services and understanding design for scalability, performance and reliability.
• Ability to handle a wide range of compliance requirements, translate them into scalable solutions and communicate at all organizational levels.

Required skills

• Information security and compliance experience.
• Preferred: CPA, CMA, CISA, CIA or equivalent risk, audit or compliance credentials.
• Preferred: Agile, DevOps, CISSP, CISA, CISM, GCIH, GSEC, Security+, or equivalent certifications.
• Preferred: experience performing security assessments and information system audits of networks, operating systems, applications and IT processes.