Security Ind Specialist - PKI, Amazon Trust Services

Security Ind Specialist - PKI, Amazon Trust Services

DESCRIPTION

Amazon Web Services (AWS) is the leading cloud provider for services such as: remote infrastructure, storage, networking, analytics, and enterprise applications to help global organizations move faster, lower IT costs, and scale. Security is the #1 concern of customers moving to the cloud and the AWS Cryptography team is dedicated to providing the security features our customers need. As a Compliance Expert in Amazon Trust Services, you will be a part of building and executing our program for evaluating compliance with industry standards (WebTrust, ETSI, ISO, SOC, PCI), EU regulations (eIDAS, NIST), and customer contractual requirements.

Key job responsibilities:

1. Translate customer compliance requirements into useable and scalable engineering and operational actions. Create documentation, compliance reports and articles to enable customer and auditor inquiries.
2. Define, build and maintain compliance program(s), including scope identification and validation, periodic assessments, and continuous monitoring and guidance on evolving compliance requirements.
3. Develop weekly/monthly reports that capture key business trends, highlights, lowlights, and metrics as the compliance programs are conducted.
4. Clearly communicate vision, deliverables, and project status to management and key technical and business stakeholders.
5. Establish credibility and maintain strong working relationships with groups involved with compliance matters.

1. 5+ yrs of experience in information security and audit as an industry security specialist or security analyst, auditor, security engineer/architecture, security or compliance program manager, or other related experience.
2. 5+ years of project management experience and demonstrated knowledge of program management best practices.
3. Skilled in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions.
4. Experience with implementation of security controls and driving rollout of controls.
5. Project management experience and demonstrated knowledge of program management best practices.

1. Familiarity with public key infrastructure, information security principles and best practices, cryptography, certificates, or enterprise identity.
2. Experience with service-oriented architectures and web services security.
3. Previous QSA or ISA experience.
4. Security control and compliance experience in various frameworks such as: WebTrust, ETSI EN 319 411-1 and ETSI EN 319 411-2, PCI DSS, SOC, ISO, NIST, etc.
5. Bachelor's degree in Engineering, Computer Science, Information Systems, Information Security or comparable experience.