Work in Washington Veterans Jobs

Description

The Purpose of the Strategic Risk Insights (SRI) Governance of Policies and Standards (GPS) Team is to identify, measure, and manage risk across Amazon Stores by establishing and enforcing information security policies that provide management and operational controls to reduce risk and achieve regulatory compliance.

This individual will act as a key member of the team responsible for security design, drafting, coordination and life cycle management of policy governance and exception activities for Stores Business Security Teams (responsible for business units such as Customer Service, Healthcare, Payments, Consumer Logistics).

We are looking for a critical thinker with strong technical writing skills, who has experience delivering results in a highly complex legal or regulatory industry, and therefore possesses the specific industry knowledge required to fulfill GPS goals and initiatives and measurably reduce risk across Amazon Stores. This will include managing the process of development and ongoing improvement of our internal information security polices, third-party policies, internal SOPs, life-cycle management, and policy exception processes. An ideal candidate will combine a passion for protecting customers, an ability to think big, exceptional organizational skills, and the desire to continuously improve our policies to protect customers and intellectual property.

At Amazon, we strive to be Earth’s most customer-centric company and obsess over our customers and maintaining their trust. Earning that trust in an environment as vast and varied as Amazon’s requires the applied skills of experienced and innovative Industry Specialists that are prepared to tackle challenges at scale. To do that, we empower our people to think like owners and solve problems right the first time. You must thrive in the type of environment that is constantly going and growing. If you are excited about being a visionary leader, protecting our customers and their data, and advocating for technical solutions for a rapidly growing Stores Security team, then this may be the position for you.

Key job responsibilities

• Lead development and revision of global information security policies and standards for Amazon Stores and their business security teams.

• Manage policy exception requests from global users, exercising high judgement, and escalating when appropriate.

• Own fast-paced policy research by monitoring industry trends and risk areas; draft and present thoughtful policy proposals to senior leaders.

• Create and lead cross collaborative workstreams with global teams comprised of business partners, security and privacy subject matter experts, legal, HR, third party partners, and tech teams from across Amazon.

• Manage security initiatives and drive activities including the creation and implementation of policy strategy and plans, communication with key stakeholders, issue resolution, and reporting metrics / KPIs.

• Demonstrate the ability to communicate effectively at multiple levels of management, building trust across the organization, and demonstrating discretion with sensitive information.

• Maintain a consistent working knowledge of Amazon’s security posture and the ever-changing cyber-security landscape

• Proactively solve day-to-day strategic, and sometimes technical, challenges. Proactively identify risks and partner with stakeholders to develop and implement mitigation strategies.

• Plan and manage multiple parallel projects through effective time management and prioritization, to minimize disruption on daily operations

• Manage key relationships with internal stakeholders, leaders, and business partners.

About the team

About Amazon Security:

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training and Career growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Basic Qualifications

• BA/BS degree and JD/CISSP/CRISC/similar certification or comparable legal/regulatory experience

• 5+ years policy experience for a government, technology, financial, or other highly complex and regulated environment.

• Understanding of: (1) cybersecurity threats and risks the business/customer faces and (2) information security frameworks and regulations (e.g., NIST, ISO 27001, GDPR, etc.)

• A fast learner with effective analytical skills, excellent technical and persuasive writing skills, and the ability to present complex information to stakeholders, who can quickly absorb the nuances and behaviors of Amazon's systems architecture.

• Experience identifying and solving complex issues, leading global initiatives across cross-functional teams such as Legal, HR, and Operations, and delivering scalable results in a highly complex legal or highly regulated environment.

Preferred Qualifications

• Results-oriented – ability to motivate and influence diverse teams

• Risk management experience, including: performing assessments and audits, designing controls, managing enterprise control frameworks, and prioritizing risk.

• Willingness to dive deep into your own assessments combined with experience collaborating on a team.

• Excellent verbal communication skills. You will prepare reports and deliver to senior level management. You will interact with various levels of employees to collect and communicate.

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $107,400/year in our lowest geographic market up to $229,700/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.