Risk Lead Protective Services, Protective Services, Emergency Service Unit (ESU)

Amazon Protective Services' Emergency Services and Global Standards is looking for a highly motivated physical security professional to serve as Risk Lead on the Global Services & Standards team. This is a remote role with about 50% international travel.

The team runs on a Governance, Risk, and Compliance (GRC) model, and this role owns the Risk piece. You'll assess risk in new and existing policies, standards, technology and training across Amazon Security and Amazon's subsidiaries. You'll focus mainly on the support functions ESGS teams provide to their customers and on risks to Amazon employees, operations, assets and data. Your assessments will help senior leaders make informed decisions to protect their portfolios.

What you'll do

• Build and lead risk assessments that give senior leaders clear findings they can act on.
• Work with Amazon Security, Amazon Corporate Security, Amazon Fulfillment Network Security, subsidiaries and other partners to analyze real-world risk and apply the right physical security controls.
• Evaluate new and emerging security technologies and practices that could strengthen Amazon's security.
• Lead or support evaluations of physical security measures that Amazon Security is considering.
• Help develop, analyze and improve global physical security standards, applying Amazon Global Security Policies and Standards throughout.

• About you
• You're an experienced security professional who works well with people at every level of the organization. You know physical security principles in depth and how to put them into practice. You have hands-on experience with Crime Prevention Through Environmental Design (CPTED), including its principles, data collection and analysis, how people behave in built environments, and presenting findings in reports and briefings. You consistently plan and deliver high-quality work for internal and external customers.

• Key job responsibilities
• Build programs driven by data and metrics, and agree on goals, objectives and performance outcomes with business partners.

• Create and manage global risk and resilience programs that cover both preparing ahead of time and responding in proportion when incidents happen.
• Run analytical deep dives to find vulnerabilities and root causes, and turn the findings into thorough risk reports.

Complete detailed threat and risk assessments, with risk treatment plans and recommendations.

Work with teams across functions to develop standards, procedures and processes that match business needs and help identify and reduce security risks.

Produce risk analysis that feeds reports for Amazon Security's most senior leaders.

Keep up with industry trends and events, and maintain relationships with key industry contacts and manufacturers.

Work independently as a self-starter.

• A day in the life
• No two days are the same. Some days you'll be traveling to an Amazon site somewhere in the world to run an onsite risk assessment, walking the space and talking with local security teams. Other days you'll work remotely, analyzing data, finding root causes and writing risk treatment plans. You'll work with PS teams, Fulfillment and subsidiary partners to understand their challenges. You'll turn your findings into clear recommendations for senior Amazon Security leaders, and you'll keep up with new security technologies and industry trends.

• About the team
• About the team R2G2 (Risk, Readiness & Resilience, Governance, and Global Partner Assessments) is part of Global Services & Standards. We're rethinking how we deliver our Governance, Risk, and Compliance (GRC) model to our customers. Our risk programs began with assessments and built a strong foundation.

Now we're ready to expand them to every customer we support. This is a chance to take that foundation, shape where it goes next and see the impact of your work. Join us and help us build!

• Diverse Experiences
• Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

• Why Amazon Security?
• At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

• Inclusive Team Culture
• In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

• Training & Career Growth
• We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

• Work/Life Balance
• We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic qualifications

• - Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience
• - 7+ years of HR, privacy, legal, compliance or risk management experience
• - Experience owning program strategy, end-to-end delivery, and communicating results to senior leadership
• - Knowledge of Microsoft Office products and applications at an advanced level

Preferred qualifications

• - Experience performing and/or participating in technical assessments in direct support of a major compliance effort (e.g. ISO 27001, ISO 22301, ISO 27701, ISO 9001, PCI, SOC1/SOC 2, HITRUST)
• - Experience analyzing large datasets and translating them to actionable business insight

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommo