Cybersecurity Risk & Compliance Lead, KSA, AWS Security

Join a transformative team at AWS and play a pivotal role in shaping Saudi Arabia's digital security landscape. You'll be at the forefront of interpreting complex cybersecurity regulations, developing innovative compliance frameworks, and bridging the gap between global cloud technology and local regulatory requirements.
Key job responsibilities
• Interpret and implement Saudi cybersecurity regulations
• Develop regional cybersecurity policies aligned with local requirements
• Manage regional risk register and risk treatment plans
• Coordinate risk assessments and risk acceptance processes with local, regional, and global teams
• Establish relationships with regulatory bodies
• Prepare regulatory submissions and maintain compliance
• Serve as regulatory expert to AWS, customers, auditors, and regulators on KSA's cybersecurity regulations
• Anticipate new or potential KSA cybersecurity laws and regulations for potential impact on AWS and develop appropriate mitigation approaches
• Develop and execute long-term regulatory projects and initiatives for AWS and AWS' regulated customers
• Support metrics, implement data collections mechanisms, analyze data and make recommendations to local, regional, and global teams
• Prepare project plans and track compliance projects through fruition
A day in the life
Your day will be dynamic and impactful, navigating the intricate world of cybersecurity compliance. You'll collaborate with regional and global teams, engage with regulatory bodies, and develop strategic approaches that ensure AWS meets the highest security standards in the Kingdom of Saudi Arabia.
About the team
We are a dedicated group of cybersecurity professionals committed to enabling digital transformation while maintaining the highest levels of security and compliance. Our team works at the intersection of technology, regulation, and innovation, supporting AWS's mission to empower customers across the region.
- 7+ years of experience in regulatory compliance, regulatory affairs, or public sector agencies involved in cybersecurity management and/or operations.
- In-depth knowledge of KSA cybersecurity frameworks like NCA and SAMA regulations
- Experience with cybersecurity risk assessment methodologies
- Advanced degree in related areas of study (Computer Science, Engineering, Cybersecurity, IT Security Management).
- Fluency in Arabic and English (written and verbal)
- Highly effective oral, written and interpersonal communication skills; demonstrated ability to effectively and comfortably interact at senior and executive levels.
- Experience and proficiency in report and policy writing
- Self-starter with proven track record of successfully working with a wide array of functional groups across an organization and cultures as well as working independently.
- Strong analytical and critical thinking skills with the ability to use data to back up assumptions, recommendations and drive actions.
- Ability to investigate and analyze technical and regulatory issues with applicability to cloud services.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.