){kind=logo}
Risk Manager, Global AWS Assurance, Security Assurance
Summary
Manages security assurance and compliance audits for AWS customers in South Korea and Asia-Pacific, requiring deep knowledge of global regulations, cloud security controls, and risk management frameworks.
About
At Amazon Web Services (AWS), Security is our highest priority. The AWS Security Assurance team is responsible for demonstrating the security controls of services offered by AWS. At our scale, we invent new ways to provide the highest level of assurance to our most security conscious customers.
Responsibilities
• Dive deep into customers' audit and assurance expectations across all industry sectors in South Korea and Asia-Pacific geographies.
• Dive deep into the Amazon control environment to develop broad domain and technical understanding of our security activities and control implementations to articulate compliance implications to both customers and internal/external audit functions.
• Develop understanding of regulated industry compliance requirements and communicate how our control activities meet global regulatory obligations.
• Liaise with strategic customers, regulators and auditors, articulate control implementation, and describe considerations for applying security and compliance concepts to a cloud environment.
• Monitor, evaluate, and continuously improve the organization by being a trusted adviser, facilitator and creative problem solver. Implement continuous improvements to the security organization and the program management process. Share program/project process frameworks, tools, and best practices that can be adopted throughout the organization.
• Apply a sound knowledge of global information security regulation and policy to articulate customer and regulatory impact and drive alignment to AWS environment.
Requirements
• 5+ years of compliance, audit or risk management experience
• Experience in working directly with government officials and regulatory bodies
• Experience delivering programs such as RSEFT, K-ISMS, PCI DSS, SOC 1/2/3, ISO 27001/27017/27018/22301/20000, TIA-942, HIPAA, or K-ISMS, etc.
Preferred
• Experience that includes strong analytical skills, attention to detail, and effective communication abilities
• Experience communicating effectively with senior leadership
• Experience in written and oral communication, including the ability to communicate with all levels in the organization (technical, business, executive)
• Experience auditing cloud environments
Benefits
자세한 사항은 홈페이지 참조