Security Transformation Consultant – Professional Services (HongKong)

Do you want to lead the development of planetary scale security solutions in the cloud? Are you excited to help customers automate security operations giving them unprecedented capability and agility? Do you enjoy driving fast-paced complex projects focused on game changing business outcomes for customer globally? As a senior member of the AWS Professional Services Global Security, Risk, and Compliance Practice you will have the opportunity to pioneer technically excellent security solutions supporting customer initiatives that are meaningful to their business. Building on those experiences you’ll collaborate AWS service teams on new features, innovate with new technologies and explore new challenges.

ROLES AND RESPONSIBILITIES:

• Lead teams that include Amazonians, partners, and customers to build & deploy security infrastructure and automate security operations for customers
• Lead internal builder projects
• Become a deep technical resource that earns the trust of customer executive stakeholders • Develop high-quality technical content such as automation tools, reference

architectures, and white papers to help our consultants, partners, and customers build on the work we deliver.

• Innovate on behalf of customers; translate your thoughts into action yielding measurable results.
• Mentor & invest in the development team members
• 7 years' experience in IT security, compliance, or risk management
• BA/BS degree or equivalent experience
• Hands-on technical expertise in technology automation, implementation, integration, and/or deployment
• Ability to travel to client locations to deliver professional services as needed
• Hands-on technical expertise in building security capabilities in code and deploying infrastructure in code
• Strong scripting skills, i.e., PowerShell, Python, Node.js, Javascript, Bash, Ruby, Perl, etc.
• Technical expertise (design and/or implementation) in Cloud Computing technologies
• Implementation experience with enterprise security solutions such as WAF, IPS, Anti-DDOS, and SIEM
• Demonstrated experience overcoming workload transition challenges
• Demonstrated understanding what it means to draw out customer needs and deliver practical outcomes addressing those needs.
• Experience building enterprise security strategy for cloud adoption or driving the program's evolution to meet new requirements
• Experience with Chef, Puppet, Salt, or Ansible in production environments at scale
• Evidence of the ability to lead effectively across organizations
• Understanding architectural implications of meeting industry standards such as PCI DSS, ISO27001, HIPAA, and MLPS frameworks.
• Good English verbal and written skills

BASIC QUALIFICATIONS

Responsibilities include:

-                      Expertise – Perform security assurance and compliance assessments with customers to synthesize control requirements and recommendations for next steps. 

-                      Solutions - Deliver innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.

-                      Delivery – Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment.

-                      Insights - Work with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.

BASIC QUALIFICATIONS

• 7+ years’ experience in IT security, compliance and risk management, data privacy, or security controls.
• Experience validating customers architectures meet industry standards such as PCI DSS, ISO 27001, HIPAA, GDPR, and MLPS frameworks
• Experience with enterprise risk management methods and techniques to drive successful outcomes
• Bachelor's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience required
• Ability to travel to client locations to deliver professional services as needed 
• Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes
• Clear understanding of Agile, CI/CD, DevOps approach and how they impact risk management and compliance
• Demonstrated ability to think strategically about business, product, and technical challenges
• Experience building enterprise governance, risk, and compliance programs or driving the program's evolution to meet new requirements
• Proven background in clearly writing complex technical documents that can be presented across a varied enterprise corporate audience
• Good English verbal and written skills