Skip to content
e2eHiringFor employers
Log inSign up
← Back to jobs

AmazonEmployer profile

Senior Information Security Audit Manager, DefSecc - FORI

Location not specified · 8–83.3 yrs

Experience
8–83.3 yrs
Salary
Not disclosed
Location
Location not specified
Work mode
Not specified
Job type
Full-time
Apply by
Closing date not listed
Posted
14 May 35

About this role

Description

We are looking for Senior Information Security Auditor within the Finance Operations Risks Intelligence team (FORI). FORI provides controllership across Finance Operations (FinanceOps) with a mission to identify risks, protect assets, design to-be controls, and as appropriate assist process owners with risk mitigation or remediation. FinanceOps organization manages corporate procurement, vendor payables and payments, employee payroll, customer receivables, and global real estate & facilities.

This role will be responsible for validating, reviewing, and recommending security controls in over 300+ services, applications, and websites that support FinanceOps processes. You will provide guidance, recommend, curate, and advise application engineers on security detective and preventive controls. You will be expected to create metrics to demonstrate control design effectiveness. This role combines long term strategic planning to raise the bar on security controls across Finance Operations organization with the excitement and challenge of quickly reacting to new threat scenarios. You will work closely with IT auditors and Information Security teams within FinanceOps and the broader organization, sometimes collaboratively and in some cases in partnership for organization wide initiatives or projects.

We are open to hiring candidates to work out of one of the following locations:

Bangalore, KA, IND | Hyderabad, IND

Basic Qualifications

  • Master’s degree in Computer Science, Information Security, Computer Engineering or equivalent.
  • Bachelor of Science degree (BS) in Computer Science/Engineering (or related field)
  • A minimum of 8 years of technical security experience
  • Relevant industry certifications from SANS, GIAC, CISSP, OSCP, etc.
  • 4+ years of experience in penetration testing, offensive security, or red teaming.
  • In-depth technical understanding of OWASP Top 10, and SANS 25 vulnerability identification and remediation.
  • Web Application security
  • Familiarity with static or dynamic testing tools and processes
  • Ability to influence without authority
  • Ability to deal with ambiguity and establish clear strategy

Preferred Qualifications

Preferred Qualifications

  • Past experience with retail and related industry
  • Experience in generating automated metrics to measure IT security control effectiveness and consistency.
  • Excellent teamwork and collaboration skills.
  • Results-oriented, high energy, and self-motivated.
  • Information security professional certifications encouraged (or related experience)
  • Experience securing, and operating Amazon Web Services
  • Experience and knowledge in code development
  • Excellent written communication skills, with a focus on translating technically complex issues into simple, easy to understand concepts
  • Excellent attention to detail without losing the big picture


Company - ADCI HYD 13 SEZ

Job ID: A2507760

Skills

Finance Information Technology and Accounting/Auditing
Senior Information Security Audit Manager, DefSecc - FORINot disclosed