Sec & Compliance Eng Mgr, AWS Security Assurance Services, LLC

About the role

The AWS Security Assurance Services (SAS) team is hiring a Senior Security & Compliance Engineering Manager to lead a team of security and compliance engineers who innovate on behalf of customers building security and compliance solutions, proofs of concept, and products. You will own the team’s roadmap, hire and grow engineers, and drive the long-term strategy for security and compliance engineering and automation in support of regulated customers.

Responsibilities

• Manage a team of security and compliance engineers in multiple locations and one or two managers under you.
• Hire and develop bar-raising talent, run customized onboarding, and grow engineers through delegation, development planning, coaching, stretch assignments, and promotions.
• Provide both tactical and strategic management where the problem, opportunity, and strategy may not be fully defined.
• Establish team structure, inspection mechanisms, KPIs, and SLAs that let the team deliver complex problems independently and measure team progress, customer experience, and operational excellence.
• Define team and cross-team goals, and contribute to the organization’s strategic goal planning and execution.
• Own regular reporting to key stakeholders; write clear narratives and reports for senior leadership up to three levels above.
• Negotiate priorities across teams and partner orgs; influence partner-team roadmaps and resourcing, and drive resolution of escalations.
• Set the direction and technical bar for security and compliance emerging-tech proofs of concept, solutions, and products.
• Identify and shape sales opportunities; provide input to AWS service-team roadmaps and SAS offering strategy.
• Travel to customer sites as needed.

About the team

The Security Assurance Services team, part of Amazon Web Services, leverages the expertise and ingenuity of builders to establish scalable security solutions for both internal and external customers that drive business outcomes. The team works with AWS’s largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud.

AWS Security Assurance Services LLC is a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm. The team consists of industry-certified assessors and security and compliance engineers helping customers achieve, maintain, and automate compliance in the cloud by tying applicable audit standards to AWS service features and functionality.

Requirements

• 5+ years of managing and developing teams experience.
• 5+ years of progressive work within a software security team or related operating environment experience.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Knowledge of security of web services, video content protection technologies, cryptography, network security protocols, and operating system security.
• Experience applying threat modeling or other risk identification techniques or equivalent.
• Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls.
• Experience working and communicating with multiple stakeholders, C-level executives, and cross-functional teams.
• Demonstrated ability to independently manage a team where the strategy is not fully defined; track record of defining metrics, setting goals, and delivering 1–3 year initiatives.
• Track record of running emerging-tech POCs and end-to-end solution development to clear outcomes with enterprise customers, across multiple teams and partners.

Preferred Qualifications

• Information security professional certification (SANS GIAC, CISSP, etc.).
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques.
• Experience managing remote team members.
• 4+ years of cloud architecture and solution implementation experience, or US government security clearance of top secret or above.
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
• Experience with compliance & security standards including PCI DSS, ISO 27001, HIPAA, and NIST.
• 5+ years of technical specialist, design, and architecture experience, or AWS Professional level certification.
• Experience developing, deploying, and managing AI products at scale.
• AWS Professional level certification, or Bachelor's degree in business administration, finance, economics, computer science, data science, engineering, or other related field.
• Experience leading teams that delivered SCPs and RCPs in multi-account AWS Organizations at enterprise scale.
• Experience overseeing reusable policy-as-code work (cfn-guard, OPA Rego, Cedar, or equivalent) deployed via CI/CD across large customer environments.
• Knowledge of AWS security and governance services: Config, GuardDuty, Security Hub, Control Tower, Systems Manager, KMS, IAM, VPC, Lambda, CloudTrail, CloudWatch, EventBridge.

Pay

The base salary range for this position varies by location:

• USA, TN, Nashville: $166,300 - $225,000 USD annually
• USA, TX, Austin: $175,100 - $236,900 USD annually
• USA, TX, Dallas: $175,100 - $236,900 USD annually
• USA, TX, Houston: $175,100 - $236,900 USD annually
• USA, VA, Arlington: $175,100 - $236,900 USD annually
• USA, VA, Herndon: $175,100 - $236,900 USD annually
• USA, WA, Seattle: $175,100 - $236,900 USD annually

Your Amazon package will include sign-on payments, restricted stock units (RSUs), and comprehensive benefits.

Benefits

• Health insurance (medical, dental, vision, prescription, basic life & AD&D insurance, and optional supplemental life plans).
• Employee Assistance Program (EAP) and mental health support.
• Medical advice line.
• Flexible Spending Accounts.
• Adoption and surrogacy reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.