Insider Risk Specialist, AWS Security
London, England, gb
Amazon Web Services (AWS) is the leading cloud provider, providing virtualized infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’ multi-tenant infrastructure
AWS is looking for an exceptional Insider Risk Specialist to join our security team.
This position will be working as part of a wider team of industry-leading security experts working with UK customers. It will support the Insider Risk Lead by owning, developing, and implementing critical insider risk workstream operational activity.
This role is people-facing on two levels: external customers, and internal customers that the insider risk team is responsible for providing guidance to and carrying out investigations for.
As a result, the ideal candidate will have strong interpersonal skills, excellent prioritisation and time management, analytical capabilities from prior experience with investigations, excellent communication abilities, and experience in security risk management or wider security processes.
Key job responsibilities
Among other responsibilities, the Insider Risk Specialist will:
•Support with preparation and follow-up actions for recurring governance meetings with senior stakeholders
•Develop and maintain insider risk workstream documentation, including SOPs, runbooks, and policy
•Support with project management activities and reporting to leadership
•Develop and implement role-specific security training programs for various audiences
•Create and manage training compliance mechanisms
•Support with security culture initiatives through newsletters, briefings, and events
•Collaborate with the communications team to identify gaps in employees’ understanding of security policies
•Develop and track key metrics for insider risk mitigation assessment
•Build trend analysis reports from insider risk incident data
•Support with implementing risk management frameworks
•Collaborate with other security teams on wider investigations processes
•Handle insider risk-related casework through its full lifecycle, including:
•Participate in tabletop exercises for insider risk scenarios
•Engage with corporate partners to optimise collaboration and support
•Develop mentoring mechanisms for knowledge-sharing across security teams
About Amazon Security
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve..
BASIC QUALIFICATIONS
Minimum of 5 years’ experience in the security fieldMinimum of 2 years’ experience with data analysis and working with business intelligence and data visualisation tools to manage large datasets (i.e., AmazonBI, Quicksight). Strong analytical and problem-solving skills
Strong time management skills and ability to prioritise in a fast-paced environment
PREFERRED QUALIFICATIONS
This position requires a detail-oriented individual who can handle multiple priorities while maintaining strong stakeholder relationships and contributing to the overall security posture of the organisation. An entrepreneurial spirit with the ability to drive innovation independently; have a passion to improve at every opportunityEffective written and oral communication with multiple levels of leadership involving both business and technical sides of the business
Ability to able to credibly coordinate between technical teams and business stakeholders
Demonstrated maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills. Familiarity with web services, multi-tiered systems, workflow modelling and enterprise application integration
Ideal candidate will have an intermediate or better level of knowledge of a variety of regulated security programs in multiple fields (personnel security, program security, physical security, and education, awareness, and training)