GRC Specialist, AWS Security

2 settimane fa


Milan, Italia Vendita al dettaglio e all'ingrosso Import-export A tempo pieno

Job ID: | Amazon Web Services Australia Pty LtdAmazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure.AWS Security is looking for a GRC Specialist to contribute to the certification, accreditation, assurance, and authorisation activities across the security program. The successful candidate is a problem‑solver, quick‑study, with a broad understanding of the regulatory landscape, cloud technologies, experience in security and compliance.Key job responsibilitiesServe as the GRC Specialist for designated (physical and/or logical) components within the cloud capability, to perform assurance and authorization activities to ensure adherence to standards and protocols.Collaborate with internal teams and customers to establish baselines and level‑set the security requirements, security controls, and security objectives.Implement ISM, PSPF, DSPF, ASIO T4, NIST and/or other security compliance frameworks into design and build baselines to achieve the agreed security posture.Create, optimise, and support cross‑functional working groups and projects aimed at enhancing security efficiency and effectiveness across the organization.Utilise domain expertise to develop thought leadership material on cloud and emerging technologies, contributing to the organization’s knowledge base and industry positioning.Deliver to tight deadlines and drive results, demonstrating exceptional attention to detail and ensuring accuracy in all aspects of security management.Hold or be able to attain an Australian Government Security Vetting Agency clearance (see day in the life In your day‑to‑day you will need to exercise sound judgment in making trade‑offs between short versus long term security and business goals. You will demonstrate resilience and navigate difficult situations with composure and tact, with a goal to achieve a great outcome for the customer. You will be successful in this role by regularly analysing your own performance with a critical eye. A broad understanding of the AWS business and its interconnections is required. This position will also provide training, advice, and mentorship to other teams throughout AWS.About the team Why Amazon Security – At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.The team is comprised of security professionals with a cross section of national security and private sector experience, providing a range of perspectives required for creative problem solving. We value diversity of thought, creativity, and a strong Bias for Action and Earn Trust. We believe that there are no “perfect” security solutions and we develop and iterate using a continuous improvement process.Diverse Experiences – AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why AWS? – Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating— that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.Inclusive Team Culture – AWS values curiosity and connection. Our employee‑led and company‑sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.Mentorship & Career Growth – We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge‑sharing, mentorship and other career‑advancing resources here to help you develop into a better‑rounded professional.Work/Life Balance – We value work‑life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.Basic Qualifications4+ years experience working in areas related to security assurance, such as cybersecurity, auditing, security architecture, regulatory affairs or public sector agencies involved in cybersecurity management.Experience working with governance, risk and compliance programs that directly involve interaction with regulatory bodies.Proficient with government security frameworks, policies and standards (e.g. PSPF, ISM, DSPF, ASD Essential Eight).Experience working with cloud technologies.Preferred QualificationsDegree or equivalent experience in (Computer Science, Engineering, Cyber Security, IT Security Management, Security Risk Management) a related security field.Minimum 4 years experience in implementing and operationalising security to meet business outcomes.Proven ability to not only influence but lead business partners and supporting teams.Ability to credibly coordinate between technical teams and business stakeholders.Strong communication skills. Ability to produce detailed and complex written business cases without the use of PowerPoint.Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.#J-18808-Ljbffr



  • Milan, Italia Vendita al dettaglio e all'ingrosso Import-export A tempo pieno

    Job ID: | Amazon Web Services Australia Pty LtdAmazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to...

  • GRC Consultant

    3 settimane fa


    Milan, Italia aizoOn Technology Consulting A tempo pieno

    aizoOn, società di consulenza tecnologica di innovazione, indipendente, che opera a livello globale ricerca un / una GRC Consultant - Information Security. Siamo alla ricerca di un/una Consulente in ambito Cybersecurity, con esperienza in GRC e Information Security & Compliance, che supporti le attività di rafforzamento del framework di controllo e di...

  • GRC Consultant

    4 settimane fa


    Milan, Italia aizoOn Technology Consulting A tempo pieno

    aizoOn, società di consulenza tecnologica di innovazione, indipendente, che opera a livello globale ricerca un / una GRC Consultant - Information Security. Siamo alla ricerca di un/una Consulente in ambito Cybersecurity, con esperienza in GRC e Information Security & Compliance, che supporti le attività di rafforzamento del framework di controllo e di...

  • GRC Consultant

    2 settimane fa


    Milan, Italia aizoOn Technology Consulting A tempo pieno

    aizoOn, società di consulenza tecnologica di innovazione, indipendente, che opera a livello globale ricerca un / una GRC Consultant - Information Security. Siamo alla ricerca di un/una Consulente in ambito Cybersecurity, con esperienza in GRC e Information Security & Compliance, che supporti le attività di rafforzamento del framework di controllo e di...

  • GRC Consultant

    1 settimana fa


    Milan, Italia aizoOn Technology Consulting A tempo pieno

    aizoOn, società di consulenza tecnologica di innovazione, indipendente, che opera a livello globale ricerca un / una GRC Consultant - Information Security. Siamo alla ricerca di un/una Consulente in ambito Cybersecurity, con esperienza in GRC e Information Security & Compliance, che supporti le attività di rafforzamento del framework di controllo e di...


  • Milan, Italia Altro A tempo pieno

    Una società di consulenza tecnologica cerca un GRC Consultant - Information Security a Milano. Il candidato ideale avrà esperienza in Cybersecurity, GRC e Compliance, e supporterà l'implementazione di iniziative legate agli standard ISO, in particolare ISO/IEC 27001. Questo ruolo richiede capacità nel rafforzare il framework di controllo della sicurezza...


  • Milan, Italia Vendita al dettaglio e all'ingrosso Import-export A tempo pieno

    Data Center Security Manager, AWS DC SecurityAWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have...

  • Cybersecurity Consultant

    3 settimane fa


    Milan, Italia Tinexta Cyber A tempo pieno

    CHI SIAMOTinexta Cyber è il polo italiano della Cyber Security, che unisce l'eccellenza nella protezione digitale ad un approccio innovativo alla system integration. Siamo un punto di riferimento per le aziende che cercano soluzioni avanzate e sicure, grazie alle nostre tecnologie proprietarie e competenze all’avanguardia. La nostra missione è creare...


  • Milan, Italia Tinexta Cyber A tempo pieno

    CHI SIAMOTinexta Cyber è il polo italiano della Cyber Security, che unisce l'eccellenza nella protezione digitale ad un approccio innovativo alla system integration. Siamo un punto di riferimento per le aziende che cercano soluzioni avanzate e sicure, grazie alle nostre tecnologie proprietarie e competenze all’avanguardia. La nostra missione è creare...


  • Milan, Italia Altro A tempo pieno

    Una società di consulenza tecnologica è alla ricerca di un/una GRC Consultant per la sede di Milano. La risorsa si occuperà di attività legate alla Cybersecurity, GRC e Compliance, supportando il rafforzamento del framework di controllo della sicurezza delle informazioni, in particolare sugli standard ISO/IEC 27001. Si richiede esperienza in sicurezza...