Sr. Sec & Compliance Eng Mgr, AWS Security Assurance Services, LLC

About the role

The Senior Security & Compliance Engineering Manager leads a team of security and compliance engineers who innovate on behalf of our customers building innovative security and compliance solutions, proof of concepts, and products solving for new levels of scale, complexity, and performance in the age of AI. You will own the team’s roadmap, hire and grow engineers, and drive the long-term strategy for security and compliance engineering and automation in support of regulated customers.

Responsibilities

• Manage a team of security and compliance engineers in multiple locations and one or two managers under you.
• Hire and develop bar-raising talent, run customized onboarding, and grow engineers through delegation, development planning, coaching, and stretch assignments, and promotions.
• Provide both tactical and strategic management where the problem, opportunity, and strategy may not be fully defined.
• Establish team structure, inspection mechanisms, KPIs and SLAs that let the team deliver complex problems independently, and measure team progress, customer experience, and operational excellence.
• Define team and cross-team goals, and contribute to the organization’s strategic goal planning and execution.
• Own regular reporting to key stakeholders.
• Write clear narratives and reports for senior leadership up to three levels above.
• Negotiate priorities across teams and partner orgs.
• Influence partner-team roadmaps and resourcing, drive resolution of escalations.
• Identify and shape sales opportunities; provide input to AWS service-team roadmaps and SAS offering strategy.
• Travel to customer sites as needed.

Qualifications

• 5+ years of managing and developing teams experience.
• 5+ years of progressive work within a software security team or related operating environment experience.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security.
• Experience in managing and developing teams.
• Experience applying threat modeling or other risk identification techniques or equivalent.
• Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls.
• Experience working and communicating with multiple stakeholders, C-level executives and cross-functional teams.
• Demonstrated ability to independently manage a team where the strategy is not fully defined; track record of defining metrics, setting goals, and delivering 1–3 year initiatives.
• Track record of running emerging-tech POCs and end-to-end solution development to clear outcomes with enterprise customers, across multiple teams and partners.

Preferred Qualifications

• Information security professional certification (SANS GIAC, CISSP etc.).
• Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques.
• Experience managing remote team members.
• 4+ years of cloud architecture and solution implementation experience, or US government security clearance of top secret or above.
• Experience with networking protocols such as HTTP, DNS and TCP/IP.
• Knowledge of compliance & security standards including PCI DSS, ISO 27001, HIPAA, and NIST.
• 5+ years of technical specialist, design and architecture experience, or AWS Professional level certification.
• Experience developing, deploying and managing AI products at scale.
• AWS Professional level certification, or Bachelor's degree in business administration, finance, economics, computer science, data science, engineering, or other related field.
• Experience leading teams that delivered SCPs and RCPs in multi-account AWS Organizations at enterprise scale.
• Knowledge of AWS security and governance services: Config, GuardDuty, Security Hub, Control Tower, Systems Manager, KMS, IAM, VPC, Lambda, CloudTrail, CloudWatch, EventBridge.