Job Description
DESCRIPTION
AWS Trust & Safety (T&S) is a global team that helps protect against abusive use of AWS services while simultaneously working to build trust with AWS’s customers, partners, and other stakeholders. T&S engages with a variety of stakeholders to understand cloud infrastructure-related trust and safety issues, develop fit-for-purpose frameworks to assess and minimize risks for AWS’s customers, and develop guidelines and processes for responding to trust and safety issues. Our team members display a solid understanding of AWS’s cloud infrastructure, strong technical knowledge, and the ability to exercise sound judgment on complex and time-sensitive matters.
The Risk & Response Technical Program Manager will work with the leaders across Trust & Safety to identify, research and contextualize emerging risks in the cloud computing and online safety space. You will dive deep on understanding cloud infrastructure, combine that understanding with information about emerging abuse trends, and assess the impact of those trends on AWS, our customers, and the work performed by Trust & Safety. You will help to lead T&S efforts to raise the bar on early abuse prevention and mitigation and your strategic thinking, analytical abilities, and stakeholder management skills will be put to practical use to ensure preparedness for risk incidents across T&S.
The ideal candidate will understand the role of trust and safety in cloud infrastructure, have experience developing trust and safety risk programs, be able to distill data and information from a variety of sources, assess emerging threats and external situations, and recommending areas of improvement. This is an inherently cross-functional role that requires close collaboration with T&S leadership, T&S Operations counterparts, AWS services, and cross-functional partners.
Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.
Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have twelve employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.
Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives.
Key job responsibilities
Program Management:
- Develop and manage complex, cross-functional programs and projects aligned with the mission and vision of both T&S, and the R&R team.
- Create and maintain project plans, timelines, and roadmaps
- Coordinate resources across multiple teams and departments
Technical Leadership:
- Provide technical guidance and expertise in security-related matters
- Collaborate with engineering teams to ensure security best practices are implemented
- Stay current with emerging security technologies and trend
Risk Management:
- You will create and manage a framework to ingest, investigate, and assess business and operational risk within the T&S space.
- You will create mechanisms to escalate and review identified risks with T&S leadership
- You will work with internal and external stakeholders to investigate and prioritize risk, and drive mitigation efforts where appropriate.
- You will build actionable recommendation plans based on identified gaps and/or improvement areas with relevant owners, deadlines and inter-dependencies identified. You will oversee implementation of strategic emerging risk related projects, and develop mitigation strategies where necessary.
- You will develop risk rating matrices and heuristics to allow for consistent risk judgements across T&S
Stakeholder Management:
- Communicate project status, risks, and issues to executive leadership and stakeholders
- Facilitate meetings and drive decision-making processes
- Manage expectations and resolve conflicts among team members and stakeholders
Process Improvement:
- Identify opportunities to improve security processes and workflows
- Implement and oversee security policies and procedures
- Standardize and document best practices for the security team
Incident Response:
- Develop and maintain incident response plans
- Coordinate cross-functional teams during security incidents
- Conduct post-incident reviews and implement lessons learned
Team Development:
- Mentor and guide junior team members
- Facilitate knowledge sharing and skill development within the security team
- Collaborate with HR to develop training programs for security awareness
Cross-functional Collaboration:
- Work closely with T&S cross functional partners from AWS Security, Legal, Fraud, Networking, various service teams, etc.
- Ensure security considerations are integrated into broader organizational initiatives
- Act as a liaison between technical and non-technical teams
BASIC QUALIFICATIONS
- 5+ years and subject matter expertise in trust and safety, threat/risk assessment, privacy, public policy, or legal with an emphasis on the technology industry.
- 5+ years of technical product or program management experience
- 4+ years demonstrated experience assessing high profile and emergent issues, preferably in the context of cloud infrastructure, cybersecurity, network security, or geopolitics as it relates to the internet.
- Proven stakeholder management skills.
- Ability to work effectively under high pressure, with strong interpersonal and communication skills to engage with cross-functional teams and leadership.
- Ability to translate information, data, and insights into actionable recommendations
- Bachelor's Degree. In lieu of a degree, additional years of hands-on experience may be substituted. Advanced degree a plus.
- 5+ years experience in a security engineering/architecture leadership role or project management in the same fields.
Job Tags
Full time, Work from home,