Cloud Security Specialist

Job Summary

This is a specialist position within our cloud security program, focusing on ensuring the security and compliance of our cloud infrastructure.

We are seeking an experienced GRC Specialist to contribute to the certification, accreditation, assurance, and authorization activities across our security program.

The successful candidate will serve as the GRC Specialist for designated components within the cloud capability, performing assurance and authorization activities to ensure adherence to standards and protocols.

You will collaborate with internal teams and customers to establish baselines and level-set the security requirements, security controls, and security objectives.

The role involves implementing ISM, PSPF, DSPF, ASIO T4, NIST, and other security compliance frameworks into design and build baselines to achieve the agreed security posture.

You will create, optimize, and support cross-functional working groups and projects aimed at enhancing security efficiency and effectiveness across the organization.

In addition, you will utilize domain expertise to develop thought leadership material on cloud and emerging technologies, contributing to the organization's knowledge base and industry positioning.

Delivering results under tight deadlines, demonstrating exceptional attention to detail, and ensuring accuracy in all aspects of security management are essential qualities for this role.

1. Serve as the GRC Specialist for designated components within the cloud capability, to perform assurance and authorization activities to ensure adherence to standards and protocols.
2. Collaborate with internal teams and customers to establish baselines and level-set the security requirements, security controls, and security objectives.
3. Implement ISM, PSPF, DSPF, ASIO T4, NIST, and/or other security compliance frameworks into design and build baselines to achieve the agreed security posture.
4. Create, optimize, and support cross-functional working groups and projects aimed at enhancing security efficiency and effectiveness across the organization.
5. Utilize domain expertise to develop thought leadership material on cloud and emerging technologies, contributing to the organization's knowledge base and industry positioning.
6. Deliver to tight deadlines and drive results, demonstrating exceptional attention to detail and ensuring accuracy in all aspects of security management.

1. 7+ years experience working in areas related to security assurance, such as cybersecurity, auditing, security architecture, regulatory affairs or public sector agencies involved in cybersecurity management.
2. Experience working with governance, risk, and compliance programs that directly involve interaction with regulatory bodies.
3. Proficient with government security frameworks, policies, and standards (e.g. PSPF, ISM, DSPF. ASD Essential Eight).
4. Experience working with cloud technologies.

You will exercise sound judgment in making trade-offs between short versus long-term security and business goals.

Demonstrating resilience and navigating difficult situations with composure and tact, with a goal to achieve a great outcome for the customer.

You will be successful in this role by regularly analyzing your own performance with a critical eye.

A broad understanding of the AWS business and its interconnections is required.

This position will also provide training, advice, and mentorship to other teams throughout AWS.

AWS values diverse experiences and encourages candidates from non-traditional backgrounds to apply.

As a security professional at AWS, you will have opportunities to accelerate your career and gain experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.