GRC Specialist, AWS Security

OverviewJob ID: | Amazon Web Services Australia Pty Ltd Amazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure. AWS Security is looking for a GRC Specialist to contribute to the certification, accreditation, assurance, and authorisation activities across the security program. The successful candidate is a problem-solver, quick-study, with a broad understanding of the regulatory landscape, cloud technologies, experience in security and compliance. Hold or be able to attain an Australian Government Security Vetting Agency clearance (see ResponsibilitiesServe as the GRC Specialist for designated (physical and/or logical) components within the cloud capability, to perform assurance and authorization activities to ensure adherence to standards and protocols. Collaborate with internal teams and customers to establish baselines and level-set the security requirements, security controls, and security objectives. Implement ISM, PSPF, DSPF, ASIO T4, NIST and/or other security compliance frameworks into design and build baselines to achieve the agreed security posture. Create, optimise, and support cross-functional working groups and projects aimed at enhancing security efficiency and effectiveness across the organization. Utilise domain expertise to develop thought leadership material on cloud and emerging technologies, contributing to the organization’s knowledge base and industry positioning. Deliver to tight deadlines and drive results, demonstrating exceptional attention to detail and ensuring accuracy in all aspects of security management. QualificationsBasic Qualifications4+ years experience working in areas related to security assurance, such as cybersecurity, auditing, security architecture, regulatory affairs or public sector agencies involved in cybersecurity management. Experience working with governance, risk and compliance programs that directly involve interaction with regulatory bodies. Proficient with government security frameworks, policies and standards (e.g. PSPF, ISM, DSPF. ASD Essential Eight). Experience working with cloud technologies. Hold or be able to attain an Australian Government Security Vetting Agency clearance (see Preferred QualificationsDegree or equivalent experience in (Computer Science, Engineering, Cyber Security, IT Security Management, Security Risk Management) a related security field. Minimum 4 years experience in implementing and operationalising security to meet business outcomes. Proven ability to not only influence but lead business partners and supporting teams. Ability to credibly coordinate between technical teams and business stakeholders. Strong communication skills. Ability to produce detailed and complex written business cases without the use of PowerPoint. Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. #J-18808-Ljbffr