Sec & Compliance Eng Mgr, AWS Security Assurance Services, LLC

About the role

The AWS Security Assurance Services (SAS) team is hiring a Senior Security & Compliance Engineering Manager to lead a team of security and compliance engineers who innovate on behalf of customers by building security and compliance solutions, proofs of concept, and products that address new levels of scale, complexity, and performance in the age of AI. You will own the team’s roadmap, hire and grow engineers, and drive the long-term strategy for security and compliance engineering and automation in support of regulated customers.

Responsibilities

• Manage a team of security and compliance engineers across multiple locations, including one or two direct reports who are managers.
• Hire and develop high-performing talent, run customized onboarding, and grow engineers through delegation, development planning, coaching, stretch assignments, and promotions.
• Provide both tactical and strategic management where the problem, opportunity, and strategy may not be fully defined.
• Establish team structure, inspection mechanisms, KPIs, and SLAs to enable independent delivery of complex problems, and measure team progress, customer experience, and operational excellence.
• Define team and cross-team goals, and contribute to the organization’s strategic goal planning and execution.
• Own regular reporting to key stakeholders; write clear narratives and reports for senior leadership up to three levels above.
• Negotiate priorities across teams and partner organizations, influence partner-team roadmaps and resourcing, and drive resolution of escalations.
• Set the direction and technical bar for security and compliance emerging-tech proofs of concept, solutions, and products.
• Identify and shape sales opportunities; provide input to AWS service-team roadmaps and SAS offering strategy.
• Travel to customer sites as needed.

About the team

The Security Assurance Services team, part of Amazon Web Services, leverages the expertise and ingenuity of builders to establish scalable security solutions for both internal and external customers that drive business outcomes. The team’s goal is to secure the world’s workloads and build a brighter future for humanity by delivering reliable, bar-raising security outcomes and investing in security mechanisms and automation on behalf of customers.

AWS Security Assurance Services LLC, a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm, is a team of industry-certified assessors and security and compliance engineers. The team helps customers achieve, maintain, and automate compliance in the cloud by tying applicable audit standards to AWS service features and functionality. The team works with AWS’s largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud.

Requirements

• 5+ years of experience managing and developing teams.
• 5+ years of progressive work experience within a software security team or related operating environment.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Knowledge of security for web services, video content protection technologies, cryptography, network security protocols, and operating system security.
• Experience applying threat modeling or other risk identification techniques.
• Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls.
• Experience working and communicating with multiple stakeholders, C-level executives, and cross-functional teams.
• Demonstrated ability to independently manage a team where the strategy is not fully defined; track record of defining metrics, setting goals, and delivering 1–3 year initiatives.
• Track record of running emerging-tech proofs of concept and end-to-end solution development to clear outcomes with enterprise customers, across multiple teams and partners.

Preferred Qualifications

• Information security professional certification (e.g., SANS GIAC, CISSP).
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques.
• Experience managing remote team members.
• 4+ years of cloud architecture and solution implementation experience, or a U.S. government security clearance of top secret or above.
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
• Experience with compliance and security standards including PCI DSS, ISO 27001, HIPAA, and NIST.
• 5+ years of technical specialist, design, and architecture experience, or an AWS Professional level certification.
• Experience developing, deploying, and managing AI products at scale.
• AWS Professional level certification, or a Bachelor's degree in business administration, finance, economics, computer science, data science, engineering, or other related field.
• Experience leading teams that delivered Service Control Policies (SCPs) and Resource Creation Policies (RCPs) in multi-account AWS Organizations at enterprise scale.
• Experience overseeing reusable policy-as-code work (e.g., cfn-guard, OPA Rego, Cedar, or equivalent) deployed via CI/CD across large customer environments.
• Knowledge of AWS security and governance services: Config, GuardDuty, Security Hub, Control Tower, Systems Manager, KMS, IAM, VPC, Lambda, CloudTrail, CloudWatch, EventBridge.

Pay

The base salary range for this position varies by location:

• Nashville, TN: $166,300 – $225,000 USD annually
• Austin, Dallas, Houston, Arlington, Herndon, Seattle: $175,100 – $236,900 USD annually

Your compensation package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on experience, qualifications, and location.

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription, basic life & AD&D, with optional supplemental life plans).
• Employee Assistance Program (EAP) and mental health support.
• Medical Advice Line.
• Flexible Spending Accounts.
• Adoption and surrogacy reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.

Learn more about our benefits at amazon.jobs/en/benefits.