Information Security Governance Policy Analyst at Amazon
Information Security Governance Policy Analyst Details
June 6, 2019, 2:09 a.m.
Systems, Quality, & Security Engineering
Information Security
Seattle, Washington
consensus across team InfoSec, Legal, Business
Amazon.com is looking for a technical industry specialist focused on driving information security compliance. This role will provide advisory guidance to new and existing businesses at Amazon, and will regularly conduct deep dives into critical risk areas. If you enjoy working in a rapidly changing environment and influencing the strategic direction of a large global organization, this position will provide you with a challenging opportunity. You will be responsible for driving consensus across teams to define and influence the secure and compliant design of systems worldwide. Key tasks: · Leads the creation, implementation, monitoring, and maintenance of security Policies and Standards · Establishes credibility and maintains strong working relationships with groups involved with payment security and compliance matters (InfoSec, Legal, Business Development, Internal Audit, Fraud, Physical Security, Developer Community, Networking, Systems, etc.). · Responsible for building and influencing
· Minimum 5 years of information security governance, audit, risk management or related client service or consulting experience. · Skilled in risk management, business risk analysis and making complex business/risk trade-off recommendations and decisions. · Technical knowledge and familiarity with all information security standards. · Related security control and compliance experience in various frameworks including: PCI DSS, PCI PA-DSS, PCI PTS, GLBA, ISO, NIST, etc. · CISSP, CISA, CISM and/or other comparable security controls or audit certifications preferred. · Experience with service-oriented