AWS Security Governance

For our international team, we are looking for an AWS Governance/Compliance Specialist with a strong security background. In this role, you will support security assessment activities and provide security assurance and governance for Deutsche Telekom projects related to AWS landing zone. You will work closely with international project teams, architects, and stakeholders to ensure solutions meet Deutsche Telekom security requirements. This is not a delivery or operational role. It is a security assurance and governance position.

We are looking for someone with strong knowledge of the AWS landing zone principles and core security controls (e.g. AWS service control policies, IAM, VPC design, Amazon GuardDuty and Security Hub, KMS), along with a general understanding of security governance and policies aligned with best practices. To support product development by ensuring compliance with security requirements, experience with project assessment and governance is needed. Definition and review of security best practices on AWS will be performed regularly. We are looking for someone who will not hesitate to engage in researching how to connect new technology for our benefit. Getting things done and solving problems with the team are essential to the team culture.

Tasks: 

• Perform security reviews of projects as part of the internal security assessment process.
• Provide advisory support to project teams from a security and compliance perspective.
• Assess AWS architectures and designs against internal security requirements.
• Define, review, and help enforce internal security requirements for AWS-based solutions.
• Identify, assess, and document security risks, support risk acceptance and exception processes.
• Govern security testing activities, evaluate results, track findings, and follow up on remediation.
• Contribute to the development of security standards and best practices within the Deutsche Telekom environment.

Qualifications

Hard Skills

• Fluent in English, spoken and written
• Ability to work independently and take ownership of security topics
• Strong knowledge of AWS and related platform/security services, such as:
  • AWS architecture and deployment patterns
  • Operational concepts (how the AWS environment is typically operated and secured)
  • AWS Organizations and Service Control Policies (SCPs)
  • Identity and Access Management (IAM)
  • VPC design and network segmentation concepts
  • AWS Security Hub and Amazon GuardDuty
  • Key Management Service (KMS)
  • Infrastructure-as-Code templates

• Experience with security governance, policies, or compliance frameworks
• Experience with risk assessment, vulnerability management, or security analysis

Soft Skills

• Great communication skills and ability to work in multicultural environments
• Drive and commitment to assignments
• Problem-solving attitude and willingness to ask for help when needed.

Additional Information

Advantages: 

• 5+ years of proven history with risk and vulnerability management
• Certificate in AWS
• German language

What our team offers to you: 

• Supportive colleagues locally and internationally 
• Various insights into the different areas of cyber security and supporting fields 
• Knowledge expansion through trainings, professional certifications

* Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.

* Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.