Amazon Music Hiring For Senior Information Security Audit Manager, DefSecc – FORI at India Full Time

DESCRIPTION

We are looking for Senior Information Security Auditor within the Finance Operations Risks Intelligence team (FORI). FORI provides controllership across Finance Operations (FinanceOps) with a mission to identify risks, protect assets, design to-be controls, and as appropriate assist process owners with risk mitigation or remediation. FinanceOps organization manages corporate procurement, vendor payables and payments, employee payroll, customer receivables, and global real estate & facilities.

This role will be responsible for validating, reviewing, and recommending security controls in over 300+ services, applications, and websites that support FinanceOps processes. You will provide guidance, recommend, curate, and advise application engineers on security detective and preventive controls. You will be expected to create metrics to demonstrate control design effectiveness. This role combines long term strategic planning to raise the bar on security controls across Finance Operations organization with the excitement and challenge of quickly reacting to new threat scenarios. You will work closely with IT auditors and Information Security teams within FinanceOps and the broader organization, sometimes collaboratively and in some cases in partnership for organization wide initiatives or projects.

We are open to hiring candidates to work out of one of the following locations:

Bangalore, KA, IND | Hyderabad, IND

BASIC QUALIFICATIONS

. Master’s degree in Computer Science, Information Security, Computer Engineering or equivalent.
. Bachelor of Science degree (BS) in Computer Science/Engineering (or related field)
. A minimum of 8 years of technical security experience
. Relevant industry certifications from SANS, GIAC, CISSP, OSCP, etc.
. 4+ years of experience in penetration testing, offensive security, or red teaming.
. In-depth technical understanding of OWASP Top 10, and SANS 25 vulnerability identification and remediation.
. Web Application security
. Familiarity with static or dynamic testing tools and processes
. Ability to influence without authority
. Ability to deal with ambiguity and establish clear strategy

PREFERRED QUALIFICATIONS

Preferred Qualifications
. Past experience with retail and related industry
. Experience in generating automated metrics to measure IT security control effectiveness and consistency.
. Excellent teamwork and collaboration skills.
. Results-oriented, high energy, and self-motivated.
. Information security professional certifications encouraged (or related experience)
. Experience securing, and operating Amazon Web Services
. Experience and knowledge in code development
. Excellent written communication skills, with a focus on translating technically complex issues into simple, easy to understand concepts
. Excellent attention to detail without losing the big picture