Security Assessor, AWS Hardware Supply Chain Security

Role Overview

At the heart of Amazon Web Services (AWS) lies a steadfast commitment to cloud security, ensuring our infrastructure meets the demands of the most security-conscious customers. As a Security Assessor on the AWS team, you'll play an integral role in safeguarding this environment, focusing on security products spanning diverse platforms and technologies at AWS's global scale.

Key Responsibilities

• Lead technical engagements both internally and externally to gather business needs, operational challenges, and identify security risks.
• Coordinate schedules and logistics for security evaluations at various sites worldwide.
• Prioritize and analyze security findings, recommending suitable mitigation strategies.
• Communicate technical solutions via detailed documentation to cross-functional teams and leadership.
• Collaborate with suppliers to resolve security issues and enhance supply chain defenses continually.
• Foster trusted relationships across geographies and cultures.
• Address complex security escalations where problem definition and solutions are not straightforward.
• Undertake frequent travel (60%+) to perform on-site assessments, educate partners, and nurture vital business partnerships.
• Commit to ongoing learning, mentoring colleagues and evolving personal expertise.

Role Environment

You will be responsible for assessing risks tied to suppliers and directing security requirements throughout hardware and firmware lifecycles. Collaboration with security professionals, suppliers, and operational teams is essential to fortify AWS's supply chain security. This role thrives on knowledge sharing and mentorship, welcoming professionals at varying experience levels.

Basic Qualifications

• Bachelor's degree or equal qualification in Computer Science, Engineering, Information Systems Management, Information Security, or related fields.
• Minimum 5 years of experience in supply chain operations.
• Background in physical security practices.
• Knowledge of at least two areas among networking fundamentals, security, storage/databases (relational or NoSQL), and operating systems (Unix, Linux, Windows).
• At least 3 years engaged in audit or security assessment programs with strong communication skills.
• Proficiency in both Mandarin Chinese and English (written and spoken), or ability to work efficiently in remote environments.

Preferred Qualifications

• Demonstrated use of data and metrics to evaluate impact and identify improvements.
• Experience with analytical tools like Excel (pivot tables, macros), SQL, and visualization platforms such as Tableau or Quicksight.
• Professional information security certification (e.g., SANS GIAC, CISSP) or a Bachelor's degree.
• Advanced understanding of networking, security, databases, and operating systems.
• Over 5 years of expertise managing cross-functional programs.
• Familiarity with security assessment frameworks including NIST, CIS Top 20, OWASP, ISO 27000 series.
• Hands-on experience conducting audits and engaging with on-site personnel directly.

Additional Information

This position entails frequent international travel (over 60%) to various AWS supplier sites and Amazon facilities. The team values a healthy balance between work and personal life to promote well-being and success. AWS fosters an inclusive culture and is committed to accommodating candidates with disabilities throughout the hiring process. For accessibility needs, please get in touch with the recruitment partner.

Company: Amazon Asia-Pacific Resources Private Limited (Singapore)

Job ID: A10471079