Insider Risk Specialist, AWS Security

ENGINEERINGUK; London; On-site; GBP 50,000 - 90,000; Full time

Job description

DESCRIPTION

Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS' multi-tenant infrastructure.

AWS is looking for an exceptional Insider Risk Specialist to join our security team. This position will be working as part of a wider team of industry-leading security experts working with UK customers. It will support the Insider Risk Lead by owning, developing, and implementing critical insider risk workstream operational activity.

This role is people-facing on two levels: external customers, and internal customers that the insider risk team is responsible for providing guidance to and carrying out investigations for.

As a result, the ideal candidate will have strong interpersonal skills, excellent prioritisation and time management, analytical capabilities from prior experience with investigations, excellent communication abilities, and experience in security risk management or wider security processes.

Key job responsibilities
Among other responsibilities, the Insider Risk Specialist will:

1. Support with preparation and follow-up actions for recurring governance meetings with senior stakeholders.
2. Develop and maintain insider risk workstream documentation, including SOPs, runbooks, and policy.
3. Support with project management activities and reporting to leadership.
4. Develop and implement role-specific security training programs for various audiences.
5. Create and manage training compliance mechanisms.
6. Support with security culture initiatives through newsletters, briefings, and events.
7. Collaborate with the communications team to identify gaps in employees' understanding of security policies.
8. Develop and track key metrics for insider risk mitigation assessment.
9. Build trend analysis reports from insider risk incident data.
10. Support with implementing risk management frameworks.
11. Collaborate with other security teams on wider investigations processes.
12. Handle insider risk-related casework through its full lifecycle, including:
13. Participate in tabletop exercises for insider risk scenarios.
14. Engage with corporate partners to optimise collaboration and support.
15. Develop mentoring mechanisms for knowledge-sharing across security teams.

BASIC QUALIFICATIONS

Minimum of 5 years' experience in the security field.
Minimum of 2 years' experience with data analysis and working with business intelligence and data visualisation tools to manage large datasets (i.e., AmazonBI, Quicksight). Strong analytical and problem-solving skills.
Strong time management skills and ability to prioritise in a fast-paced environment.

PREFERRED QUALIFICATIONS

This position requires a detail-oriented individual who can handle multiple priorities while maintaining strong stakeholder relationships and contributing to the overall security posture of the organisation. An entrepreneurial spirit with the ability to drive innovation independently; have a passion to improve at every opportunity.

Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business.
Ability to credibly coordinate between technical teams and business stakeholders.
Demonstrated maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills. Familiarity with web services, multi-tiered systems, workflow modelling and enterprise application integration.

Ideal candidate will have an intermediate or better level of knowledge of a variety of regulated security programs in multiple fields (personnel security, program security, physical security, and education, awareness, and training).

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build.