포지션 상세
At Amazon Web Services (AWS), Security is our highest priority. The AWS Security Assurance team is responsible for demonstrating the security controls of services offered by AWS. At our scale, we invent new ways to provide the highest level of assurance to our most security conscious customers.
• Dive deep into the Amazon control environment to develop broad domain and technical understanding of our security activities and control implementations to articulate compliance implications to both customers and internal/external audit functions.
• Develop understanding of regulated industry compliance requirements and communicate how our control activities meet global regulatory obligations.
• Liaise with strategic customers, regulators and auditors, articulate control implementation, and describe considerations for applying security and compliance concepts to a cloud environment.
• Monitor, evaluate, and continuously improve the organization by being a trusted adviser, facilitator and creative problem solver. Implement continuous improvements to the security organization and the program management process. Share program/project process frameworks, tools, and best practices that can be adopted throughout the organization.
• Apply a sound knowledge of global information security regulation and policy to articulate customer and regulatory impact and drive alignment to AWS environment.
• Experience in working directly with government officials and regulatory bodies
• Experience delivering programs such as RSEFT, K-ISMS, PCI DSS, SOC 1/2/3, ISO 27001/27017/27018/22301/20000, TIA-942, HIPAA, or K-ISMS, etc.
주요업무
• Dive deep into customers' audit and assurance expectations across all industry sectors in South Korea and Asia-Pacific geographies.• Dive deep into the Amazon control environment to develop broad domain and technical understanding of our security activities and control implementations to articulate compliance implications to both customers and internal/external audit functions.
• Develop understanding of regulated industry compliance requirements and communicate how our control activities meet global regulatory obligations.
• Liaise with strategic customers, regulators and auditors, articulate control implementation, and describe considerations for applying security and compliance concepts to a cloud environment.
• Monitor, evaluate, and continuously improve the organization by being a trusted adviser, facilitator and creative problem solver. Implement continuous improvements to the security organization and the program management process. Share program/project process frameworks, tools, and best practices that can be adopted throughout the organization.
• Apply a sound knowledge of global information security regulation and policy to articulate customer and regulatory impact and drive alignment to AWS environment.
자격요건
• 5+ years of compliance, audit or risk management experience• Experience in working directly with government officials and regulatory bodies
• Experience delivering programs such as RSEFT, K-ISMS, PCI DSS, SOC 1/2/3, ISO 27001/27017/27018/22301/20000, TIA-942, HIPAA, or K-ISMS, etc.
