Principal Security TPM, AGS Security Engineering

About the role

This new team is the security engineering function for AWS Global Sales (AGS), helping the field engage customers securely and keeping the business secure. You'll work closely with AWS Account Teams and the field's security community, AGS leaders, and partner teams across AWS security, tooling, and legal.

Responsibilities

• Own the field's security and governance frameworks (customer builds, prototyping, public content), building on the AWS Security standards and codifying them into the steering docs, skills, MCPs, and agents the field builds with
• Grow the field's security reviewer community, recruiting, training, and accrediting reviewers and keeping their judgment calibrated as technology and threats evolve, so security judgment spreads and reviews stay consistent
• Own field security training on the responsibilities and frameworks the field operates within, partnering with security engineers and AWS Security on content and Field Enablement on delivery
• Measure AGS against AWS-wide security standards and run the business security review that gives leadership a regular, prioritized read on risk, partnering with leaders to close gaps and enabling leaders to run their own
• Partner with the business through post-incident follow-through, helping it articulate what happened, representing it to AWS Security leadership, and supporting it in closing the action items it owns
• Own the AGS field's security roadmap, balancing near-term wins against long-term shifts in how the field builds, so the security bar keeps pace
• Own the governance mechanism for security exceptions and escalations, keeping decisions consistent and documented, and holding the line when stakeholders challenge the process

Qualifications

• 7+ years of technical product or program management experience
• Experience managing programs across cross functional teams, building processes and coordinating release schedules
• Bachelor's degree in Computer Science, Engineering, a related field, or equivalent experience
• 5+ years of security, compliance and risk management experience
• Experience owning/driving roadmap strategy and definition