[Hiring] Risk Lead @Amazon

Role Description

Amazon Protective Services' Emergency Services and Global Standards is looking for a highly motivated physical security professional to serve as Risk Lead on the Global Services & Standards team. This is a remote role with about 50% international travel.

The team runs on a Governance, Risk, and Compliance (GRC) model, and this role owns the Risk piece. You'll assess risk in new and existing policies, standards, technology and training across Amazon Security and Amazon's subsidiaries. You'll focus mainly on the support functions ESGS teams provide to their customers and on risks to Amazon employees, operations, assets and data. Your assessments will help senior leaders make informed decisions to protect their portfolios.

What you'll do

• Build and lead risk assessments that give senior leaders clear findings they can act on.
• Work with Amazon Security, Amazon Corporate Security, Amazon Fulfillment Network Security, subsidiaries and other partners to analyze real-world risk and apply the right physical security controls.
• Evaluate new and emerging security technologies and practices that could strengthen Amazon's security.
• Lead or support evaluations of physical security measures that Amazon Security is considering.
• Help develop, analyze and improve global physical security standards, applying Amazon Global Security Policies and Standards throughout.

A day in the life

No two days are the same. Some days you'll be traveling to an Amazon site somewhere in the world to run an onsite risk assessment, walking the space and talking with local security teams. Other days you'll work remotely, analyzing data, finding root causes and writing risk treatment plans. You'll work with PS teams, Fulfillment and subsidiary partners to understand their challenges. You'll turn your findings into clear recommendations for senior Amazon Security leaders, and you'll keep up with new security technologies and industry trends.

Qualifications

• Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience.
• 7+ years of HR, privacy, legal, compliance or risk management experience.
• Experience owning program strategy, end-to-end delivery, and communicating results to senior leadership.
• Knowledge of Microsoft Office products and applications at an advanced level.

Requirements

• Experience performing and/or participating in technical assessments in direct support of a major compliance effort (e.g. ISO 27001, ISO 22301, ISO 27701, ISO 9001, PCI, SOC1/SOC 2, HITRUST).
• Experience analyzing large datasets and translating them to actionable business insight.

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription).
• Basic Life & AD&D insurance and option for Supplemental life plans.
• EAP, Mental Health Support, Medical Advice Line.
• Flexible Spending Accounts.
• Adoption and Surrogacy Reimbursement coverage.
• 401(k) matching.
• Paid time off.
• Parental leave.