Amazon Jobs

Description

Are you interested in driving exceptional security for customers? Do you see compliance as a business enabler? Amazon’s Stores Security organization is seeking an experienced Security Technical Program Manager (TPM). As part of the Amazon Stores Security OCISO InfoSec China team, this role will build the bridges between security, technology and compliance by working across remote and local teams within Amazon Security organization, core security teams, and related Amazon corporate teams. This candidate should be a technically experienced and an innovative security/compliance professional who has the ability to dive deep into a variety of complex issues, understand IT processes, and drive continuous process improvement to existing and emerging compliance standards.

The ideal candidate will have strong leadership and problem-solving skills, excellent communication skill, and effectively work with cross-functional business and software development teams to solve problems and implement new solutions through innovative process changes.

Key job responsibilities

• Establish credibility and maintain strong working relationships with groups involved with information security matters (Legal, Business Development, Internal Audit, Fraud, Networking, Application Security, Third Party Security, Public Policy, etc.)

• Develop a working knowledge of the operational processes and controls in place that supporting the Amazon Information Security and Compliance teams, including commercial and regulatory compliance programs, and guiding control owners in documenting their control activities

• Perform service impact assessments of existing and emerging compliance programs

• Manage the readiness efforts of services for audit and/or certification

• Support process improvement and control implementation projects in coordination with the service teams

• Assist stakeholders and third-party developer with aligning standard operating procedures, controls, monitoring, and reporting with the goal of improving operations, compliance policies, and risk management

• Innovation of mechanisms to better meet business processes and compliance requirements

A day in the life

• Engage with Amazon China business and technical teams, technical stakeholders and third-party solution developer to identify security needs, and maintain a broad understanding of the regulatory landscape impacting Amazon China businesses

• Work with a global cross-functional team of Security Engineers, Assessors, and technical program managers to deliver security reviews, and ensure compliance aligned with governmental standards and processes

• Maintain metrics on security and compliance, and prepare reports for senior management on the state of security in region

• Ensure the team delivers on security goals, and make recommendations for incremental process improvement

About the team

Why Amazon Security

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Mentorship and Career growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

We are open to hiring candidates to work out of one of the following locations:

Beijing, 11, CHN

Basic Qualifications

• 5+ years of project management disciplines including scope, schedule, budget, quality, along with risk and critical path management experience

• 4+ years of technical product or program management experience

• Bachelor's degree in engineering, computer science or equivalent

• 3+ years of analytical, quantitative, communication, and presentations experience

• 4+ years of experience in performing and/or participating in technical assessments of complex IT architecture; Experience managing programs across cross functional teams, building processes and coordinating release schedules; Experience with Governance, Risk, and Compliance tools, Application Security and Third-Party Security; Experience in working directly with auditors/regulators in support of compliance audits for MLPS, PCI, SOC, ISO and other compliance regimes; Fluency in both Chinese and English languages with sufficient writing skill

Preferred Qualifications

• 6+ years of technical product or program management experience

• Experience managing technical programs across cross-functional teams, building processes and coordinating release schedules

• A record of delivery of large IT process improvement projects with technology processes and/or major tech companies

• Strong bias for action with ability to prioritize, multi-task, and meet deadlines

• Meets/exceeds Amazon’s leadership principles requirements for this role

• Meets/exceeds Amazon’s functional/technical depth and complexity for this role