software security consultant

Burraq Consulting

<div><div><div>Closing on: May 31, 2026</div></div><div><div><div><div>
Job Category: Remote
</div><div>Job Type: Freelance
</div><div>Job Location: Pakistan
</div><div>Salary: Project Based
</div><div>Experience: 5 Years
</div><div>Department: Auditing and Compliance
</div><div>Education: Masters in Cyber Security
</div></div></div></div><div><h3 class="jobSectionHeader">About Us</h3>

Burraq Consulting is a leading training and consultancy firm in Pakistan, delivering professional services in HSE, ISO certifications, corporate training, and compliance solutions. We are expanding our technical team and looking for a Senior Information Security Consultant who can conduct ISO 27001 audits and meet the ISO requirements for our clients.
<div>
</div><h3 class="jobSectionHeader">Job Overview</h3>

We are seeking experienced ISO 27001 Consultants to support multiple client engagements on a project-to-project basis. The consultant will be responsible for implementing, auditing, and maintaining Information Security Management Systems (ISMS) in line with ISO 27001 requirements.

This role is ideal for professionals who prefer flexible, assignment-based work and have hands-on experience delivering ISO 27001 certification projects across different industries.
<div>
</div><h3 class="jobSectionHeader">Key Responsibilities</h3>
<ul><li>Lead end-to-end ISO 27001 implementation projects</li>
<li>Conduct gap assessments against ISO/IEC 27001 standards</li>
<li>Develop and review ISMS documentation (policies, procedures, risk registers, SoA, etc.)</li>
<li>Perform risk assessments and risk treatment planning</li>
<li>Provide guidance on Annex A controls implementation</li>
<li>Conduct internal audits and support clients during certification audits</li>
<li>Deliver awareness and training sessions to client teams</li>
<li>Liaise with certification bodies and external auditors</li>
<li>Ensure project timelines, deliverables, and quality standards are met</li>
</ul><h3 class="jobSectionHeader">Requirements</h3>
<ul><li>Proven experience in ISO/IEC 27001 implementation or consulting</li>
<li>Strong understanding of ISMS framework and risk management methodologies</li>
<li>Experience with Statement of Applicability (SoA) and control mapping</li>
<li>Familiarity with ISO 27001:2022 standard (preferred)</li>
<li>Lead Implementer and/or Lead Auditor certification (highly preferred)</li>
<li>Ability to manage multiple clients and projects independently</li>
<li>Strong documentation and communication skills</li>
</ul><h3 class="jobSectionHeader">Preferred Skills</h3>
<ul><li>Experience in related standards (e.g., ISO 22301, ISO 20000, GDPR)</li>
<li>Background in IT, cybersecurity, or information security</li>
<li>Experience working with certification bodies</li>
<li>Industry exposure (e.g., IT, healthcare, finance, telecom)</li>
</ul><h3 class="jobSectionHeader">Engagement Model</h3>
<ul><li>Project-based assignments with defined scope and timelines</li>
<li>Flexible working arrangements (remote or on-site depending on client needs)</li>
<li>Compensation based on project scope, complexity, and duration</li>
</ul><h3 class="jobSectionHeader">How to Apply</h3>

Interested candidates are encouraged to submit their CV along with a portfolio of recent design work to: people@burraqconsulting.com with subject line &ldquo;Information Security Consultant&ldquo;.</div></div>

Senior Information Security (ISO 27001) Consultant

Openkyber

<div>Greetings from OpenKyber! We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position? Direct client Req:: Need Sr Application Security Architect &amp; Engineer Hybrid , VA PLEASE SEND THE RESUMES TO hirings@openkyber.com ! Job Description: Description: ABOUT THE ROLE Virginia Tax is seeking an Application Security Engineer (ASE) with 5+ years of experience to join the Office of Technology under Joint Security Operations. In this role, the ASE serves as a dedicated security partner to application teams, providing guidance on secure design, vulnerability management, and secure development practices. The ASE works collaboratively across the SDLC to ensure security is embedded into application design, development, testing, and deployment. This includes supporting compliance requirements, delivering training and education, and assisting teams with vulnerability remediation efforts. The successful candidate will identify and recommend improvements to improve the security of all Virginia Tax applications, promote secure coding and development practices, and contribute to ongoing initiatives that reduce risk and strengthen the agency s overall security posture. Responsibilities include but not limited to: Provide security guidance, training, and best practices for development and operations teams. Support secure software development by applying knowledge of SDLC, Agile, and Scrum methodologies. Evaluate software architecture and design for security risks and alignment with DevSecOps principles. Promote and enforce secure coding standards and guidelines. Review source code to identify vulnerabilities and recommend remediation strategies. Assess security risks across multiple programming languages (e.g., JavaScript, C#, Java, Ruby, SQL). Analyze and secure modern web application architectures, including cloud, APIs, microservices, and client server models. Identify and address common vulnerabilities, including those outlined in the OWASP Top 10. Support vulnerability remediation, patch management, and continuous improvement efforts. Utilize application security testing tools such as SAST, DAST, IAST, and platforms like Accunetix, Veracode, Jenkins, Splunk, Rapid7, and Tenable. Interpret and act on findings from SIEM systems, including Splunk. Apply knowledge of common security controls and frameworks. Ensure compliance with relevant security regulations and standards (e.g., NIST 80053, IRS Pub 1075, PCIDSS). Implement and evaluate AWS cloud security controls and best practices. Create, maintain, and review System Security Plans (SSPs). Troubleshoot and resolve complex technical and security-related issues. Stay current with evolving threats, technologies, and industry trends. Develop detailed plans and communicate risks, impacts, and recommendations effectively. Collaborate with application teams, QA engineers, and operations teams to integrate security into workflows. Provide constructive, actionable feedback to application teams. Communicate technical concepts clearly to both technical and nontechnical audiences. Work closely with other security analysts and technology teams to support agency and enterprise security initiatives. Manage multiple tasks, prioritize effectively, and meet deadlines. Apply critical thinking to evaluate and mitigate security risks and vulnerabilities. Required Skills/Experience: Five or more years experience in application security. Two or more years network or firewall/AWS Security Groups. Experience with log collection, vulnerability scans and remediation, or privileged access management. Strong understanding of security concepts, network protocols, and threat vectors. Proficiency in SIEM,IDS/IPS, EDR,and other relevant security tools. Excellent analytical and problem-solving skills. Strong communication, collaboration, and documentation skills. Ability to work independently and as part of a team in a fast-paced environment. Have experience and a strong knowledge of the following: Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Linux and Windows Operating Systems, Baseline hardening of operating systems IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall At least one of these certs below is REQUIRED: CompTIA Security+ ISC2 CC (Certified in Cybersecurity) Offensive Security Certified Professional (OSCP) CCSP (Certified Cloud Security Professional) CSSLP (Certified Secure Software Lifecycle Professional) At least one of these certs below is highly DESIRED (Independently and or with one of the above) AWS Solutions Architect (Associate/Professional) AWS Security Specialty At least one of the any is DESIRED CompTIA PenTest+ Certified Ethical Hacker (CEH), GIAC Certified Intrusion Analyst (GCIA Fill the above skills in the below box and have consultant to complete SKILLS MATRIX Skill Required Amount of Experience Experience Application Security Required 5 Years Network or Firewall/AWS security Groups Required 2 Years Infrastructure as Code (IaC): Advanced proficiency in Terraform for multi-account landing zones and automated provisioning. Required 2 Years Experience with log collection, vulnerability scans and remediation, or privileged access management Required 4 Years Proficiency in SIEM, IDS/IPS, EDR, and other relevant security tools. Required 4 Years Networking &amp; Hybrid Connectivity: Solid understanding of routing, firewalls, AWS Direct Connect, and VPNs in a hybrid cloud environment. Required 4 Years One REQUIRED: CompTIA Security+, ISC2 CC (Certified in Cybersecurity), Offensive Security Certified Professional (OSCP), CCSP, or CCLP. UPLOAD COPY!! Required CI/CD &amp; DevOps: Experience with GitLab CI/CD, Jenkins, or AWS CodePipeline for automated, secure deployments. Highly desired 5 Years Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Highly desired 2 Years Linux and Windows Operating Systems, Baseline hardening of operating systems Highly desired 2 Years IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall Highly desired 2 Years One highly DESIRED (Independently and or with one of the above): AWS Solutions Architect (Associate/Professional) or AWS Security Specialty Highly desired One of these is DESIRED: CompTIA PenTest+, Certified Ethical Hacker (CEH), or GIAC Certified Intrusion Analyst (GCIA) Highly desired OpenKyber Austin, TX 78727| Direct: OpenKyber is an Affirmative Action/Equal Opportunity Employer that supports workplace diversity. All employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, marital or family status, sexual orientation, gender identity, or genetic information. All OpenKyber staff must be able to demonstrate the legal right to work in the United States. OpenKyber is an E-Verify employer
For applications and inquiries, contact: hirings@openkyber.com</div>

OCI Cloud Security Engineer

All for One Egypt

<div>
 
 Technical Consultant - IT Security Operation
 
 
 
 
 
 WHAT MAKES YOUR JOB EXCITING
 
 <ul>
 <li>
 Working in a team of seasoned IT-security specialists
 </li>
 <li>
 Setting up and monitoring endpoint security on server systems
 </li>
 <li>
 Automating operations in a hybrid infrastructure
 </li>
 <li>
 Identifying possible security threats and determining the best security measures.
 </li>
 <li>
 Contributing to design, implementation, and maintenance of IT security protocols, policies, plans, and systems
 </li>
 <li>
 Supporting security risk audits and security (penetration) tests and designing required countermeasures
 </li>
 <li>
 Compiling and presenting reports on test results.
 </li>
 </ul>
 
 
 
 
 YOUR EXPERIENCE &amp; APPROACH
 
 <ul>
 <li>
 Successfully completed university studies (bachelor's degree) in Computer Science, Criminal Science, or Law Enforcement with a focus on Information Security, or an equivalent vocational qualification
 </li>
 <li>
 Good knowledge of Microsoft Active Directory Services, Microsoft Windows Server, and IT infrastructure
 </li>
 <li>
 A self-driven personality, constantly educating yourself on latest IT security trends and technologies and acquiring related technical skills
 </li>
 <li>
 A highly logical, honest, and objective nature.
 </li>
 <li>
 Great communication skills and the ability to present technical jargon in an understandable way
 </li>
 <li>
 Willingness to learn and grow
 </li>
 <li>
 Strong result-orientation and ability to work independently
 </li>
 <li>
 Very good command of English written and spoken - German language skills as a definitive plus.
 </li>
 <li>
 Basic knowledge of Microsoft Active Directory Services, Microsoft Windows Server and IT infrastructure
 </li>
 <li>
 An independent and conscientious way of working
 </li>
 <li>
 The interest in taking on new technical challenges
 </li>
 <li>
 The will to develop in an exciting, agile environment
 </li>
 </ul>
 
 
 
 
 YOUR BENEFITS
 
 <ul>
 <li>
 Challenging and varying assignments with world market leaders and hidden champions
 </li>
 <li>
 Vast opportunities for building, nurturing, and honing your skills through regular knowledge exchange with our experts
 </li>
 <li>
 Autonomy, flexibility in your daily work
 </li>
 <li>
 extensive opportunities for growth and professional development supported through our mentoring system and onsite training programs in Germany
 </li>
 <li>
 Secure role in a friendly, open-minded, and committed team
 </li>
 <li>
 Attractive salary package; social insurance and private medical insurance.
 </li>
 <li>
 40 hours per week following the Egyptian vacation system, weekend on Friday &amp; Saturday.
 </li>
 </ul>
 
 
 
 
 We look forward receiving your online application!
 
</div>

Technical Consultant - IT Security Operation

Apple

Apple&rsquo;s OS Security team is looking for a motivated software engineer to design, build, and deploy world-class containment and isolation mechanisms throughout our operating systems. As part of the Security Engineering and Architecture group, you will develop the foundational technologies-including compartmentalization, mandatory access control, and robust policy engines-that ensure our platforms are resilient and never just one mistake away from compromise. Our goal is for users to feel confident that our devices have their back every time they interact with an Apple product. 
 
Description 
 
In this hands-on software engineering role, you will design robust software systems and craft secure, high-performance code, collaborating across the company with everyone from our Silicon Engineering group to our Human Interface designers. We build technology deep within macOS and iOS internals, but we also lift it up through the software stack, creating ergonomic APIs that connect world-class security engineering directly to developers and users. You will have the autonomy to invest your time into the most promising areas of research and development, seeing your work scale to protect millions of people in their daily lives. Come help us push the boundaries of pragmatic, user-focused security.&quot;,&quot;responsibilities&quot;:&quot;Design and implement state-of-the-art isolation and compartmentalization mechanisms for iOS and macOS internals. 
 
Develop and maintain label-based and mandatory access systems, alongside the sophisticated policy languages and engines that enforce them. 
 
Build secure, usable APIs that allow both first-party and third-party developers to easily adopt our containment technologies. 
 
Analyze high-level frameworks and apps to ensure our security models apply pragmatically across the entire system, while operating mostly at the OS and systems programming level. 
 
Balance security, performance, and ease of use by breaking down ambitious, multi-year security goals into tangible, deployable steps. 
 
Collaborate across Apple to ensure our security technologies are not just built, but actively and correctly used by other teams to protect what matters most. 
 
Preferred Qualifications 
 
Exposure to iOS and macOS (end user, administrator, and/or developer). 
 
Involvement in open source technologies and development communities such as FreeBSD and Linux. 
 
Real world kernel and/or hypervisor programming experience. 
 
Experience designing and implementing security policy languages. 
 
Minimum Qualifications 
 
BS in Computer Science or equivalent experience/skills in systems programming and security. 
 
Strong C and low-level systems programming skills. 
 
Understanding of operating system internals (macOS, iOS, BSD, or Linux). 
 
Ability to navigate and understand code up and down the software stack (comfortable diving into kernel, low-level userland, framework, and application code). 
 
Familiarity with past, current, and emerging security exploits and mitigation techniques. 
 
Demonstrated readiness to balance concurrent priorities, manage technical debt, and deliver on tight schedules. 
 
Excellent partnership and communication skills to collaborate with a broad range of engineering teams.&quot;,&quot;internalDetails&quot;:null 
 
Pay &amp; Benefits 
 
This posting is not for a specific job opening and by submitting your resume you are expressing interest in being contacted about this type of role at Apple in the future.

Security Software Engineer, OS Security

Amazon.com

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
Amazon Defensive Security&rsquo;s Threat Detection team provides threat detection coverage for all of Amazon. In other words, we&rsquo;re the people who keep Amazon secure from threat actors. We provide coverage to all of Amazon &amp; it subsidiaries across endpoint, cloud, network and application vectors ensuring Amazon infrastructure and customers data is secured. We work on the most challenging problems that are influenced with thousands of variables&mdash; and we&rsquo;re on the lookout for talented individuals eager to make an impact. 
 
You&rsquo;ll be part of a diverse team spanning software and security engineering disciplines. You&rsquo;ll collaborate with leaders across Amazon Security to help us build complex threat detection product, delivering comprehensive threat detection coverage at optimal business costs. And you&rsquo;ll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion. Our product is at the forefront of innovating the sophisticated, low-latency, high-performance threat detection solutions. Our industry-leading solutions are critical to safeguarding Amazon's success and protecting customer data. 
 
The successful candidate is expected to contribute to all parts of the software development and deployment lifecycle, including design, development, documentation, testing and operations. They must possess strong verbal and written communication skills, be self-driven and deliver high quality results in a fast paced environment. They will also need to be proactive and jump on to the problems quickly to come out with innovative solutions and operate with minimal guidance. 
 
Key job responsibilities 
<ul><li>Manage critical components of our threat detection platform that processes millions of messages in a day</li><li>Evaluate different design choices, prototype new technology, and implement technical solutions that address business requirements</li><li>Contribute in defining product roadmap, understand business impact of system choices, and make technical trade-offs using sound judgement</li><li>Work closely with product leadership, security partners to understand the requirements, design and deliver innovative solutions to raise bar on customer trust.</li><li>Drive engineering best practices around operational excellence, security, test automation coverage and set standards in the team</li><li>Deal with ambiguity, make data-driven decisions and juggle cross-organization complexity</li><li>Drive consensus when confronted with discordant views by identifying the best path forward and influence other to follow it</li></ul> 
About the team 
Why Amazon Defensive Security? 
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. 
 
Diverse Experiences 
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Inclusive Team Culture 
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. 
 
Training &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>3+ years of non-internship professional software development experience</li><li>2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience</li><li>Experience programming with at least one software programming language</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience</li><li>Bachelor's degree in computer science or equivalent</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, TX, Austin - 143,700.00 - 194,400.00 USD annually 
USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually</div>

Software Development Engineer II, Security Products

PTCL.Official

<div>
 
 
 ARE YOU READY TO RISE WITH PTCL GROUP
 
 
 
 
 
 
 We are not just industry leaders; we are redefining excellence with groundbreaking solutions. PTCL Group stands out in the technology industry with its commitment to high-end innovation and leading the way in delivering integrated ICT and Cellular Network services in Pakistan, all rooted in our journey of Culture Transformation &amp; Change Management.
 
 
 
 
 
 
 PTCL Group actively cultivates an inclusive &amp; diverse culture that values and uplifts every individual, regardless of their gender, social background, religion, belief, or disability
 
 .
 
 
 
 
 
 
 PTCL Group Vision &amp; Values:
 
 
 
 
 
 
 With a clear vision to become the largest technology player and champion driving the digital transformation of Pakistan, PTCL Group is guided by a set of our unified core values:
 
 
 
 
 <ul>
 <li>
 Be Resilient
 </li>
 <li>
 Think Big
 </li>
 <li>
 Win Every Battle
 </li>
 <li>
 Value Success
 </li>
 </ul>
 
 
 
 
 
 IN THIS ROLE YOU WILL:
 
 
 
 
 
 
 The purpose of this position is to ensure the quality, security, and maintainability of software applications by performing systematic source code reviews. The role involves analyzing code for compliance with coding standards, identifying potential vulnerabilities, improving performance and readability, and ensuring adherence to best practices in software development. The Source Code Reviewer collaborates with development, QA, and security teams to deliver reliable, efficient, and secure software products
 
 
 
 
 
 
 HOW CAN YOU EXPRESS YOUR TALENT:
 
 
 <ul>
 <li>
 Carefully examines software source code to ensure accuracy, efficiency, and alignment with established coding standards. This involves reviewing logic, structure, naming conventions, and adherence to best practices. The reviewer identifies deviations or potential issues early in the development process to maintain high-quality, reliable code before deployment.
 </li>
 <li>
 To detect defects, inefficiencies, and security vulnerabilities within the codebase. The reviewer documents each finding clearly, describing the issue, its potential impact, and recommended corrective actions. This systematic documentation ensures traceability, accountability, and compliance with organizational and security standards.
 </li>
 <li>
 Works closely with developers to discuss findings, explain coding issues, and suggest effective solutions. This collaboration helps build shared understanding and promotes consistent application of best practices across the development team. Constructive feedback is provided to improve both individual coding skills and overall software quality.
 </li>
 <li>
 Beyond syntax and structure, the reviewer ensures that the code meets defined functional and performance requirements. This includes verifying logic correctness, evaluating code efficiency, and ensuring that changes do not introduce regressions or performance bottlenecks. This step helps guarantee that the final product performs as intended and meets user expectations.
 </li>
 <li>
 Maintains detailed records of review outcomes, including issues identified, corrective actions taken, and final approval status. These reports serve as essential documentation for internal audits, compliance checks, and process improvement initiatives. Accurate recordkeeping supports transparency and continuous quality assurance.
 </li>
 <li>
 To ensure a seamless development lifecycle, the reviewer collaborates regularly with Quality Assurance, Security, and Project Management teams. This coordination helps align review activities with testing cycles, security assessments, and release schedules. By maintaining open communication, the reviewer contributes to timely, secure, and high-quality software delivery.
 </li>
 </ul>
 
 
 
 
 
 WHAT YOU NEED TO BE SUCCESSFUL:
 
 
 
 
 Qualification
 
 
 
 
 
 
 Bachelors in relevant field.
 
 
 
 
 
 
 
 PTCL Group's family-centric policies, offering 6-month maternity and 30-day paternity leave, along with a hybrid work model, redefine the workplace for a balanced and fulfilling career.
 
 
 
 
 
</div>

Executive Software Security & Source Code Review

Amazon Web Services (AWS)

<div>
 
 Description
 
 
 
 The Security Assurance Services (SAS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world&rsquo;s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.
 
 
 The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Governance, Risk, and Compliance leader who can address the challenges of migrating systems and workloads to the cloud? Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures?
 
 
 The AWS Security Assurance Service team is seeking a talented Senior Assurance Consultant to help the expansion of the Security Assurance practice and educate our customers on how our product-led, people-powered services helps operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud, cyber security, and compliance. You will have the opportunity to work with multiple lines of business, and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by helping enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements.
 
 
 We are looking for an innovative security/compliance professional who has the ability to handle a wide range of compliance requirements, is willing to dive in to the details, can translate those requirements into scalable solutions, and is able to communicate at all levels within an organization.
 
 
 Key job responsibilities
 
 
 Expertise &ndash; Leads teams that include Amazonians, partners, and customers to enhance security assurance and compliance programs
 
 
 Solutions - Lead a team to define innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.
 
 
 Delivery &ndash; Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment.
 
 
 Insights - Lead efforts with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.
 
 
 Ability to travel to customer sites as needed.
 
 
 
 About The Team
 
 
 
 AWS Security Assurance Services LLC, a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm, is a team of industry certified assessors, helping our customers achieve, maintain, and automate compliance in the cloud by tying together applicable audit standards to AWS service specific features and functionality.
 
 
 Diverse Experiences
 
 
 Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 
 
 Why AWS
 
 
 Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
 
 
 Work/Life Balance
 
 
 We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.
 
 
 Inclusive Team Culture
 
 
 Here at AWS, it&rsquo;s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness.
 
 
 Mentorship and Career Growth
 
 
 We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
 
 
 Hybrid Work
 
 
 We value innovation and recognize this sometimes requires uninterrupted time to focus on a build. We also value in-person collaboration and time spent face-to-face. Our team affords employees options to work in the office every day or in a flexible, hybrid work model near one of our Amazon offices.
 
 
 
 Basic Qualifications
 
 
 
 <ul>
 <li>
 5+ years in IT security, compliance and risk management, data privacy, or security controls.
 </li>
 <li>
 3+ years experience advising customers on architectures meeting industry standards and regulations such as NIST 800-53 and GDPR.
 </li>
 <li>
 3+ years experience with enterprise risk management methods and techniques to drive successful outcomes in a global enterprise environment.
 </li>
 <li>
 3+ years experience assessing security posture and producing evidence of control effectiveness in cloud environments.
 </li>
 <li>
 Bachelor's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience required.
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 CPA, CMA, CISA, CIA or equivalent risk, audit, or compliance credentials
 </li>
 <li>
 Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes.
 </li>
 <li>
 Clear understanding of Agile, CI/CD, DevOps approach and how they impact risk management and compliance.
 </li>
 <li>
 Technical security certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
 </li>
 <li>
 Demonstrated ability to think strategically about business, product, and technical challenges.
 </li>
 <li>
 Master's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience.
 
 
 </li>
 </ul>
 Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.
 
 
 
 
 Company
 
 - Amazon Web Services EMEA Dubai FZ Branch
 
 
 Job ID: A10383756
</div>

Senior Assurance Consultant, AWS Security Assurance Services

Search 10000+ Software security consultant jobs near you this May. New roles added regularly across leading industries. Apply today.