Global OnPrem Security Mgr, Global OnPrem Services

Amazon•Seattle, WA

About The Position

Amazon's Global ITS On-Premises Services organization seeks an experienced Security Service Manager to lead comprehensive security improvements across our global IT Hub network. This critical role will drive the remediation of physical and logical security vulnerabilities, working in partnership with Amazon Corporate Security (ACS) and cross-functional teams to protect Amazon's assets, data, and operations. The Security Service Manager will manage complex security programs spanning multiple regions (Americas, EMEA, APAC), addressing critical findings including access control deficiencies, asset management gaps, surveillance system failures, and data protection vulnerabilities. This role requires a strategic thinker who can prioritize high-impact security initiatives while building sustainable, scalable security frameworks across our IT Hub portfolio. As a key member of our global services team, you will play a critical role in balancing security strategies with operations, implementing process improvements, and fostering a culture of innovation across business teams. Collaboration is essential—you will work closely with other Service Managers, Regional Operations Managers, Procurement teams, and Compliance teams to identify opportunities for improvement and drive meaningful change.

Requirements

5+ years of security, compliance and risk management experience, or Bachelor's degree in business administration, finance, economics, computer science, data science, engineering, or other related field
Experience in security management in a multi-location global corporate environment
Experience in personnel security, investigations, physical security, document control, information systems security, preparing and processing DD 254's, FOCI, and visitor control
Experience influencing senior leaders/stakeholders
Experience communicating and presenting to senior leadership

Nice To Haves

6+ years of experience in security program management, physical security operations, or risk management
Experience with asset management, inventory control, and secure disposal protocols
Experience working independently and collaborating effectively in a remote team environment
CISSP, CISA, CISM or other security certification
Experience with Lenel or other alarm access control systems
Knowledge of data protection regulations and compliance requirements (GDPR, SOX, etc.)
Background in IT asset management or data center security operations
Experience partnering with corporate security organizations
Familiarity with CPTED principles and security risk assessment methodologies
Project management certification (PMP, CAPM) or equivalent experience
Experience with vendor management and third-party security oversight

Responsibilities

Security Program Management: Own the end-to-end remediation strategy for security assessment findings across global IT Hubs (Seattle, San Jose, Huntingdon, and future locations)
Manage complex security initiatives addressing physical security controls, asset management, access control systems, and data protection protocols
Develop and implement risk-based prioritization frameworks to address the most critical security vulnerabilities first
Create and maintain security program roadmaps aligned with organizational goals and compliance requirements
Drive the lifecycle of security improvement projects from assessment through implementation and validation Cross-Organizational Collaboration:
Partner with Amazon Corporate Security (ACS) to align IT Hub security standards with enterprise security policies and best practices
Collaborate with LIT Service Manager to address asset management, secure storage, and data destruction protocols
Coordinate with the ZDE program manager to ensure consistent data-bearing device handling across AV and Infrastructure teams
Work with IT Office teams to extend security improvements beyond IT Hubs to corporate office environments
Influence stakeholders across multiple organizations to secure resources, align priorities, and drive security initiatives Physical & Logical Security:
Address access control deficiencies including excessive cardholder permissions, door masking issues, and unauthorized entry points
Remediate surveillance system gaps including offline cameras, insufficient coverage, and monitoring blind spots
Implement perimeter security improvements following CPTED (Crime Prevention Through Environmental Design) principles
Establish standardized key management and credential protection protocols
Drive improvements to visitor management, vendor access controls, and emergency exit security Asset Management & Data Protection:
Design and implement comprehensive asset tracking systems for data-bearing devices across all IT Hub locations
Establish secure storage protocols for high-value assets, prototypes, and devices awaiting destruction
Create chain of custody requirements and documentation standards for IT asset movements
Develop and enforce secure media destruction protocols to prevent data exfiltration
Address vulnerabilities related to unsecured SSDs, hard drives, and storage media containing sensitive information Operational Excellence:
Analyze security metrics and KPIs to measure program effectiveness and identify emerging risks
Streamline and standardize security processes across global locations to ensure consistency
Create predictable process paths for security incident response and escalation
Develop security documentation including standard operating procedures, training materials, and compliance artifacts
Drive continuous improvement through root cause analysis and corrective action implementation Stakeholder Communication:
Provide clear, concise security program updates to senior leadership
Write narratives, status reports, and security assessments for executive audiences
Present complex security trade-offs and recommendations to cross-functional stakeholders
Facilitate security reviews and alignment sessions across organizations